kayg/infraternal
Watch
1
0
Fork
You've already forked infraternal
 0
Code Issues 356 Pull requests Projects Releases Packages Wiki Activity Actions

Binary size: dev grew +2.25 MB over production; cut and ratchet the gate (D243) #198

New issue
Closed
opened 2026-10-13 04:24:08 +00:00 by kayg · 154 comments
kayg commented 2026-10-13 04:24:08 +00:00
Owner
Copy link

D243 says the static binary goes down, not up, and the gate ratchets to each new measured size. Today the gate is useless: its caps (x86_64 16,404,816 B, aarch64 13,817,816 B) are below every build, so static builds fails on every branch and nobody sees growth.

Measured 2026-10-13:

  • production release-prod-live 9ab4329c: x86_64 20,333,104 B (stripped static)
  • dev 85368c7f (after #194 merge): x86_64 22,580,816 B, aarch64 19,986,840 B → about +2.25 MB over production.

Work:

  1. Attribute the growth between 9ab4329c and 85368c7f per crate/feature (cargo-bloat or equivalent on the release recipe) and per merge.
  2. Cut it: drop or feature-gate unused dependencies and code, share code paths, no behaviour change. Each cut is its own commit with before/after bytes.
  3. Ratchet the gate to the new measured size (both arches), so any later growth fails visibly.
  4. Anything that cannot go without a feature loss goes to the owner as a list with bytes.
D243 says the static binary goes down, not up, and the gate ratchets to each new measured size. Today the gate is useless: its caps (x86_64 16,404,816 B, aarch64 13,817,816 B) are below every build, so `static builds` fails on every branch and nobody sees growth. Measured 2026-10-13: - production `release-prod-live` 9ab4329c: x86_64 20,333,104 B (stripped static) - dev 85368c7f (after #194 merge): x86_64 22,580,816 B, aarch64 19,986,840 B → about +2.25 MB over production. Work: 1. Attribute the growth between 9ab4329c and 85368c7f per crate/feature (cargo-bloat or equivalent on the release recipe) and per merge. 2. Cut it: drop or feature-gate unused dependencies and code, share code paths, no behaviour change. Each cut is its own commit with before/after bytes. 3. Ratchet the gate to the new measured size (both arches), so any later growth fails visibly. 4. Anything that cannot go without a feature loss goes to the owner as a list with bytes.
head-x86-build.log
10 KiB
openssl-feature-graph.txt
13 KiB
d264-iterate-weighted.log
288 KiB
candidate-x86-build.log
1.4 KiB
candidate-arm-build.log
9 KiB
d264-latency-proxy-isolated.log
245 B
d264-icf-candidate-build.log
271 KiB
d265-clap-builder-build.log
177 B
d265-clap-cli-help.txt
836 B
head-x86-build.log
10 KiB
base-arm-build.log
1.4 KiB
d264-aes-gcm-test.log
47 B
d264-cargo-bloat.log
4.3 KiB
d265-clap-skill-status.json
2.7 KiB
head-x86-build.log
10 KiB
base-arm-build.log
1.4 KiB
d264-cargo-bloat-functions.log
10 KiB
perf-open-d265-clap-candidate.log
219 B
perf-open-d265-axum-baseline-lowload.log
327 B
perf-open-before-d264.log
410 B
perf-open-after-d264.log
409 B
perf-latency-before-d264-short.log
2.3 KiB
perf-latency-after-d264-paired.log
995 B
perf-cpu-features.log
3.1 KiB
d264-server-control-queue-direct-rerun.log
242 B
d264-server-renewal-ack-direct-rerun.log
866 B
iterate-finalized-diff.log
257 KiB
iterate-finalized-diff.log
257 KiB
size-ratchet-evidence.tar.gz
26 KiB
d264-iterate-absolute-retry.log
245 KiB
c75-before-x86-bloat.log
15 KiB
c75-after-x86-bloat.json
5.2 KiB
c75-after-x86-bloat.log
5.6 KiB
failed-tests-isolated-rerun.log
4.4 KiB
perf-before.log
1.9 KiB
d264-host-load-wait.log
79 B
candidate-review-input-retry.log
234 B
d264-host-load-wait-2.log
79 B
d264-iterate.log
187 KiB
d264-node-state-rerun.log
677 B
iterate-d265-axum.log
1.1 KiB
d264-iterate-absolute.log
1.1 KiB
d264-latency-proxy-retry.log
150 B
iterate-fallback-workspace-recheck.log
25 KiB
iterate-cold-profile-rerun.log
296 KiB
iterate-serial-retry.log
295 KiB
d264-server-renewal-ack-direct-rerun2.log
866 B
d264-x86-build.log
2.9 KiB
perf-latency-before-paired.log
2 KiB
perf-latency-after-paired.log
1.9 KiB
perf-open-300-pairs.log
1.6 KiB
perf-latency-after-paired.log
1.9 KiB
perf-open-d265-baseline.log
325 B
perf-open-300-pairs.log
1.6 KiB
d265-cli-size-clean-build.log
6.9 KiB
d264-latency-proxy-retry3.log
150 B
bloat-axum-x86-functions.log
6.6 KiB
build-d265-axum-clean-resume.log
6.2 KiB
d265-axum-clean-artifact.log
551 B
d265-axum-features.log
4.5 KiB
perf-open-reverse-rustls046.log
532 B
bloat-axum-x86-crates.log
7.2 KiB
iterate-axum-rustls046.log
305 KiB
perf-paired-rustls046.log
2.3 KiB
perf-paired-rustls046.log
2.3 KiB
fast-final.log
269 KiB
static-size-parser-before.log
454 B
static-size-parser-before.log
454 B
static-size-parser-after.log
287 B
fast-final-3f9efe83.log
297 KiB
open-state-path-lengths.txt
494 B
axum-rustls046-aarch64-build.log
8.3 KiB
open-axum-clean-short.log
415 B
axum-clean-build.log
9.6 KiB
agent-functional.log
2.9 KiB
cargo-deny-rustls046.log
124 KiB
x86-candidate-rustls046.txt
532 B
d264-iterate-finalized.log
1.1 KiB
open-d264-control.log
423 B
iterate-axum-candidate.log
294 KiB
h2-feature-path.txt
9.1 KiB
perf-open-d265-candidate.log
221 B
baseline-review-input-credit.log
2.2 KiB
open-phase.log
70 KiB
ab-results.json
20 KiB
verify-fast.log
291 KiB
rerun-review-input-credit.log
2.1 KiB
rerun-review-liveness.log
526 B
rerun-control-queue-remote.log
1.6 KiB
dev-release-sizes.txt
838 B
branch-x86-release-size.txt
676 B
branch-x86-release-size-corrected.txt
792 B
rebased-release-size-comparison.txt
1.2 KiB
verify-iterate.log
318 KiB
verify-fast-final.log
253 KiB
dev-review-liveness.log
8.8 KiB
branch-review-liveness-rerun.log
2.2 KiB
dev-current-x86.txt
358 B
dev-current-arm.txt
360 B
branch-current-x86.txt
364 B
branch-current-arm.txt
366 B
rebased-release-size-comparison-final.txt
1.1 KiB
dev-final-x86.txt
1.1 KiB
branch-final-x86.txt
1.1 KiB
dev-final-x86.txt
1.1 KiB
dev-final-arm.txt
1.1 KiB
branch-final-x86.txt
1.1 KiB
branch-final-arm.txt
1.1 KiB
rebased-current-size-comparison.txt
1 KiB
verify-fast-current-final.log
304 KiB
perf-open-d265-axum-candidate-retry.log
215 B
dev-final-arm.txt
1.1 KiB
unpruned-rustls046-static-size.log
721 B
aarch64-candidate-rustls046.txt
491 B
open-axum-clean-rebuilt-failure.log
1,011 B
iterate-cold-profile.log
177 KiB
perf-open-d265-axum-baseline-highload.log
331 B
perf-open-d265-clap-baseline.log
326 B
axum-rustls046-x86-shipping-build.log
62 B
verify-fast-rebased-final.log
301 KiB
kayg commented 2026-10-13 04:25:33 +00:00
Author
Owner
Copy link

Started size-ratchet on branch size-ratchet at base 85368c7fdd (origin/dev). The worktree is clean. Read #198 (no existing comments) and the preceding #194 record; #198 names no parent issue. Next: reproduce exact static sizes at 9ab4329c and this base, attribute changes by merge and crate, then cut only behavior-preserving bytes.

Started size-ratchet on branch size-ratchet at base 85368c7fdda186fa46b142be4d0546807357247a (origin/dev). The worktree is clean. Read #198 (no existing comments) and the preceding #194 record; #198 names no parent issue. Next: reproduce exact static sizes at 9ab4329c and this base, attribute changes by merge and crate, then cut only behavior-preserving bytes.
kayg commented 2026-10-13 04:33:46 +00:00
Author
Owner
Copy link

Finding: exact production revision 9ab4329c reproduces the recorded x86_64 static size: 20,333,104 bytes (stripped; scripts/auth-toolchain plus cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl). The aarch64 build is still running; no source changes yet.

Finding: exact production revision 9ab4329c reproduces the recorded x86_64 static size: 20,333,104 bytes (stripped; `scripts/auth-toolchain` plus `cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl`). The aarch64 build is still running; no source changes yet.
kayg commented 2026-10-13 04:38:08 +00:00
Author
Owner
Copy link

Finding: both exact production baselines reproduce under the release recipe: x86_64 20,333,104 B; aarch64 18,112,240 B (9ab4329c, stripped static). Against the supplied dev sizes (22,580,816 B / 19,986,840 B), the total growth is +2,247,712 B x86_64 and +1,874,600 B aarch64. The dev and merge-point builds are next.

Finding: both exact production baselines reproduce under the release recipe: x86_64 20,333,104 B; aarch64 18,112,240 B (`9ab4329c`, stripped static). Against the supplied dev sizes (22,580,816 B / 19,986,840 B), the total growth is +2,247,712 B x86_64 and +1,874,600 B aarch64. The dev and merge-point builds are next.
kayg commented 2026-10-13 04:51:20 +00:00
Author
Owner
Copy link

Finding: exact dev base 85368c7f reproduces x86_64 at 22,580,816 B, +2,247,712 B over 9ab4329c. cargo bloat --release --crates on the release target attributes the largest Rust-side gains to infraternal-server (~+0.4 MiB), plugin-mesh (+311 KiB), infraternal-agent (+142 KiB), CLI infraternal (+93 KiB), infraternal-mesh (+106 KiB), remote (+41 KiB), and release plugin (+47 KiB), with additional standard-library/future glue. OpenSSL/ring and mesh/server roles are required features; no feature is removed. I’m measuring merge checkpoints and testing size-focused compilation of agent code for an intact-feature cut.

Finding: exact dev base 85368c7f reproduces x86_64 at 22,580,816 B, +2,247,712 B over 9ab4329c. `cargo bloat --release --crates` on the release target attributes the largest Rust-side gains to infraternal-server (~+0.4 MiB), plugin-mesh (+311 KiB), infraternal-agent (+142 KiB), CLI infraternal (+93 KiB), infraternal-mesh (+106 KiB), remote (+41 KiB), and release plugin (+47 KiB), with additional standard-library/future glue. OpenSSL/ring and mesh/server roles are required features; no feature is removed. I’m measuring merge checkpoints and testing size-focused compilation of agent code for an intact-feature cut.
kayg commented 2026-10-13 04:57:52 +00:00
Author
Owner
Copy link

Finding: the first locked perf-VM attach attempt produced no timing sample: the fixture state-root variable was misspelled, so the harness used its fallback and timed out before PTY readiness. The run is discarded. The exact baseline binary had no lingering process; the fallback fixture path is already absent. I corrected the variable to INFRATERNAL_TEST_STATE_ROOT and will rerun under the same lock.

Finding: the first locked perf-VM attach attempt produced no timing sample: the fixture state-root variable was misspelled, so the harness used its fallback and timed out before PTY readiness. The run is discarded. The exact baseline binary had no lingering process; the fallback fixture path is already absent. I corrected the variable to `INFRATERNAL_TEST_STATE_ROOT` and will rerun under the same lock.
kayg commented 2026-10-13 04:58:30 +00:00
Author
Owner
Copy link

Finding: the merge-point sweep stopped before its first size measurement at 47f2b31b because the direct build invocation omitted scripts/verify's PATH export for the Zig staged by scripts/auth-toolchain. No size row was emitted. I’m fixing the invocation to prepend $CARGO_TARGET_DIR/auth-tools/zig and restarting from 47f2b31b.

Finding: the merge-point sweep stopped before its first size measurement at 47f2b31b because the direct build invocation omitted `scripts/verify`'s PATH export for the Zig staged by `scripts/auth-toolchain`. No size row was emitted. I’m fixing the invocation to prepend `$CARGO_TARGET_DIR/auth-tools/zig` and restarting from 47f2b31b.
kayg commented 2026-10-13 04:59:47 +00:00
Author
Owner
Copy link

Resuming size-ratchet on branch size-ratchet, base/head 85368c7fdd. Read all six #198 comments; no parent is named. Worktree is clean. Continuing the retained production/dev artifacts and unfinished merge sweep; no feature removal or foundational dependency changes.

Resuming size-ratchet on branch size-ratchet, base/head 85368c7fdda186fa46b142be4d0546807357247a. Read all six #198 comments; no parent is named. Worktree is clean. Continuing the retained production/dev artifacts and unfinished merge sweep; no feature removal or foundational dependency changes.
kayg commented 2026-10-13 05:04:00 +00:00
Author
Owner
Copy link

Finding: exact Cargo.lock diff 9ab4329c..85368c7f adds only first-party plugin packages/edges (45 lines); third-party versions are unchanged. Retained cargo-bloat diagnostics show mesh/server/CLI expansion, with OpenSSL/ring effectively unchanged. First merge checkpoints: 47f2b31b=16,698,208 B; UI-platform 0510bd85=16,698,208 B (x86_64, exact stripped static recipe). These are older first-parent dev checkpoints, not a linear production-to-head sequence. Testing shared action-schema construction instead of changing release optimization settings or disabling shipped features.

Finding: exact Cargo.lock diff 9ab4329c..85368c7f adds only first-party plugin packages/edges (45 lines); third-party versions are unchanged. Retained cargo-bloat diagnostics show mesh/server/CLI expansion, with OpenSSL/ring effectively unchanged. First merge checkpoints: 47f2b31b=16,698,208 B; UI-platform 0510bd85=16,698,208 B (x86_64, exact stripped static recipe). These are older first-parent dev checkpoints, not a linear production-to-head sequence. Testing shared action-schema construction instead of changing release optimization settings or disabling shipped features.
kayg commented 2026-10-13 05:05:58 +00:00
Author
Owner
Copy link

Finding: the pinned libghostty-vt static archive has a monolithic .text section (~0xed8fa bytes in the release object) retaining unused C formatter, render-state, selection and input-encoding APIs in the final binary; infraternal-shim/src/terminal_native.rs calls only terminal new/free/write/resize/get plus our snapshot adapter. Pinned Zig std/Build/Step/Compile.zig explicitly supports link_function_sections and link_data_sections for safe linker garbage collection. Measuring that build-only cut next: same pinned engine, CPU baseline, ReleaseFast/ReleaseSafe settings and public archive APIs; no terminal feature is disabled.

Finding: the pinned libghostty-vt static archive has a monolithic .text section (~0xed8fa bytes in the release object) retaining unused C formatter, render-state, selection and input-encoding APIs in the final binary; infraternal-shim/src/terminal_native.rs calls only terminal new/free/write/resize/get plus our snapshot adapter. Pinned Zig std/Build/Step/Compile.zig explicitly supports link_function_sections and link_data_sections for safe linker garbage collection. Measuring that build-only cut next: same pinned engine, CPU baseline, ReleaseFast/ReleaseSafe settings and public archive APIs; no terminal feature is disabled.
kayg commented 2026-10-13 05:09:33 +00:00
Author
Owner
Copy link

Gate reproduction before repair: the exact 85368c7f x86_64 artifact is statically linked, stripped and passes production-trust inspection, but fails at 22,580,816 B against the obsolete 16,404,816 B ceiling (retained regression probe). Work item 3 requires resetting those stale ceilings to the new measured head. I interpret “do not raise any cap” as no allowance or growth above the supplied current dev measurements (22,580,816 / 19,986,840): both replacement ceilings will equal the cut artifacts exactly, with zero slack. Keeping the obsolete ceilings would preserve the permanently failing gate described in this issue.

Gate reproduction before repair: the exact 85368c7f x86_64 artifact is statically linked, stripped and passes production-trust inspection, but fails at 22,580,816 B against the obsolete 16,404,816 B ceiling (retained regression probe). Work item 3 requires resetting those stale ceilings to the new measured head. I interpret “do not raise any cap” as no allowance or growth above the supplied current dev measurements (22,580,816 / 19,986,840): both replacement ceilings will equal the cut artifacts exactly, with zero slack. Keeping the obsolete ceilings would preserve the permanently failing gate described in this issue.
kayg commented 2026-10-13 05:19:07 +00:00
Author
Owner
Copy link

Finding: the first new perf baseline run timed out waiting for the fixture prompt; the transfer omitted crates/infraternal/tests/profile/.zshrc, which agent_fixture.py points ZDOTDIR at. That run is discarded as harness setup failure. The corrected pack now includes the isolated shell profile; rerunning baseline and candidate under separate short shared-lock runs. No runtime comparison is claimed from the failed attempt.

Finding: the first new perf baseline run timed out waiting for the fixture prompt; the transfer omitted crates/infraternal/tests/profile/.zshrc, which agent_fixture.py points ZDOTDIR at. That run is discarded as harness setup failure. The corrected pack now includes the isolated shell profile; rerunning baseline and candidate under separate short shared-lock runs. No runtime comparison is claimed from the failed attempt.
kayg commented 2026-10-13 05:20:58 +00:00
Author
Owner
Copy link

Correction to the perf harness finding: after transferring the isolated profile, the baseline still waits for the zsh-specific shim-test prompt. The perf VM root account uses /bin/bash (verified via pwd.getpwuid(0).pw_shell), so ZDOTDIR cannot set that prompt. Switching to an explicit printf readiness marker using the existing Binary fixture; no account shell or host profile is changed. Both unsuccessful probes are discarded. Host functional terminal tests already pass (79 unit, 5 integration).

Correction to the perf harness finding: after transferring the isolated profile, the baseline still waits for the zsh-specific shim-test prompt. The perf VM root account uses /bin/bash (verified via pwd.getpwuid(0).pw_shell), so ZDOTDIR cannot set that prompt. Switching to an explicit printf readiness marker using the existing Binary fixture; no account shell or host profile is changed. Both unsuccessful probes are discarded. Host functional terminal tests already pass (79 unit, 5 integration).
kayg commented 2026-10-13 05:26:15 +00:00
Author
Owner
Copy link

Completed cut 1: 722af2a323 pushed to size-ratchet. scripts/build-vt emits native function/data sections; 182 public archive exports remain on both arches. x86_64 stripped static: 22,580,816 -> 22,263,504 B, saved 317,312 B. All 54 public CLI skills/help outputs are byte-identical. fmt, shim clippy, 79 unit + 5 integration tests pass; production trust and static key memory checks pass. Locked perf VM (4 cores, CPUWeight=10000, load 0.36–0.99): real PTY echo p99 0.620 -> 0.471 ms (N=1,000), credited 50 MiB output median 16.45 -> 17.68 MiB/s (N=3). Single-session comparison only. aarch64 release link is running; final artifacts, raw perf logs and merge table will be retained under docs/verification/size-ratchet.

Completed cut 1: 722af2a3234ff2a090336f76ab4f60e58c249a6f pushed to size-ratchet. scripts/build-vt emits native function/data sections; 182 public archive exports remain on both arches. x86_64 stripped static: 22,580,816 -> 22,263,504 B, saved 317,312 B. All 54 public CLI skills/help outputs are byte-identical. fmt, shim clippy, 79 unit + 5 integration tests pass; production trust and static key memory checks pass. Locked perf VM (4 cores, CPUWeight=10000, load 0.36–0.99): real PTY echo p99 0.620 -> 0.471 ms (N=1,000), credited 50 MiB output median 16.45 -> 17.68 MiB/s (N=3). Single-session comparison only. aarch64 release link is running; final artifacts, raw perf logs and merge table will be retained under docs/verification/size-ratchet.
kayg commented 2026-10-13 05:37:44 +00:00
Author
Owner
Copy link

Completed measurement harness step: 865cb0cfd4 pushed. Added a portable real-PTY probe (explicit readiness, exact y\n output counts, no host profile changes), restricted to the perf VM. Python syntax and workspace fmt pass; both baseline and candidate execute the 1,000-echo/3×50-MiB workloads correctly. Repeated pair: echo p99 0.466/0.506 ms, throughput median 17.18/17.64 MiB/s, load 0.00–0.86; latency noise runs both directions across the two pairs, throughput is higher in both. No enterprise-scale performance claim. The aarch64 cut-1 link has completed; sizes are being recorded before the metadata cut.

Completed measurement harness step: 865cb0cfd48c0885ab122308c44a0bdb837b2d0b pushed. Added a portable real-PTY probe (explicit readiness, exact y\n output counts, no host profile changes), restricted to the perf VM. Python syntax and workspace fmt pass; both baseline and candidate execute the 1,000-echo/3×50-MiB workloads correctly. Repeated pair: echo p99 0.466/0.506 ms, throughput median 17.18/17.64 MiB/s, load 0.00–0.86; latency noise runs both directions across the two pairs, throughput is higher in both. No enterprise-scale performance claim. The aarch64 cut-1 link has completed; sizes are being recorded before the metadata cut.
kayg commented 2026-10-13 05:40:45 +00:00
Author
Owner
Copy link

Finding: the older 0510bd85 -> bf28c10a checkpoint delta (+4,617,200 B) is not a mesh-only cost. Its crates/infraternal/Cargo.toml diff also restores remote and ssh to default features, enables node mesh wiring, and Cargo.toml adds quinn/rustls/tokio-openssl to that older dev line. Those transports already exist in production 9ab4329c. The final attribution table will distinguish this historical integration interval from the direct production-to-head growth (+2,247,712 B x86_64 / +1,874,600 B ARM). Cut 1 aarch64 result is now confirmed: 19,986,840 -> 19,681,112 B, saving 305,728 B.

Finding: the older 0510bd85 -> bf28c10a checkpoint delta (+4,617,200 B) is not a mesh-only cost. Its crates/infraternal/Cargo.toml diff also restores remote and ssh to default features, enables node mesh wiring, and Cargo.toml adds quinn/rustls/tokio-openssl to that older dev line. Those transports already exist in production 9ab4329c. The final attribution table will distinguish this historical integration interval from the direct production-to-head growth (+2,247,712 B x86_64 / +1,874,600 B ARM). Cut 1 aarch64 result is now confirmed: 19,986,840 -> 19,681,112 B, saving 305,728 B.
kayg commented 2026-10-13 05:59:01 +00:00
Author
Owner
Copy link

Completed CLI measurement step: 89a6910751 pushed; interleaved VM-only probe verifies 110 outputs for 54 actions. Completed cut 2: 5ae7cbf296 pushed; shared concrete action/schema constructors preserve fields/order/defaults and public interfaces. x86_64: 22,263,504 -> 22,204,304 B, saved 59,200 B (376,512 B total). 22 API tests, 76 CLI tests (one existing ignored diagnostic), fmt and API clippy pass. Locked perf VM N=301, load 0.11–0.59: startup p50 help 2.339/2.390 ms, index 2.779/2.803 ms, mesh skill 2.676/2.724 ms; all p95 values improve. Retaining the measured 24–51 us cold-start cost for 59.2 MB less replicated storage at 1,000 nodes; no terminal IO construction changes. ARM link running.

Completed CLI measurement step: 89a69107518380388f11e303b3c5fb0aa5b8ac77 pushed; interleaved VM-only probe verifies 110 outputs for 54 actions. Completed cut 2: 5ae7cbf2963ac07413570bc2733a671b7d829a4b pushed; shared concrete action/schema constructors preserve fields/order/defaults and public interfaces. x86_64: 22,263,504 -> 22,204,304 B, saved 59,200 B (376,512 B total). 22 API tests, 76 CLI tests (one existing ignored diagnostic), fmt and API clippy pass. Locked perf VM N=301, load 0.11–0.59: startup p50 help 2.339/2.390 ms, index 2.779/2.803 ms, mesh skill 2.676/2.724 ms; all p95 values improve. Retaining the measured 24–51 us cold-start cost for 59.2 MB less replicated storage at 1,000 nodes; no terminal IO construction changes. ARM link running.
kayg commented 2026-10-13 06:08:07 +00:00
Author
Owner
Copy link

Completed ratchet steps, all pushed: 418288c6 sets exact ceilings 22,204,304 B x86_64 / 19,638,744 B aarch64 (total cuts 376,512 / 348,096 B); d626135d adds real-artifact boundary checks to static builds; e273fd30 updates PROCESS §7. Exact caps pass, +1 byte fails for each arch, smaller reported size requires lowering the ceiling, unknown targets fail. Bash syntax, fmt and boundary checks pass. Metadata ARM cut: 19,681,112 -> 19,638,744 B, saved 42,368 B. Remaining: finish merge attribution and original dev ARM reproduction, then retain evidence and run full fast on the branch head. No feature/provider removal.

Completed ratchet steps, all pushed: 418288c6 sets exact ceilings 22,204,304 B x86_64 / 19,638,744 B aarch64 (total cuts 376,512 / 348,096 B); d626135d adds real-artifact boundary checks to static builds; e273fd30 updates PROCESS §7. Exact caps pass, +1 byte fails for each arch, smaller reported size requires lowering the ceiling, unknown targets fail. Bash syntax, fmt and boundary checks pass. Metadata ARM cut: 19,681,112 -> 19,638,744 B, saved 42,368 B. Remaining: finish merge attribution and original dev ARM reproduction, then retain evidence and run full fast on the branch head. No feature/provider removal.
kayg commented 2026-10-13 06:12:47 +00:00
Author
Owner
Copy link

Finding: the shared Cargo target reused the cut native archive in the baseline sweep. Exact original 85368c7f unexpectedly measured 22,263,504 B (the cut-1 size) instead of 22,580,816 B; infraternal-shim-3b145c0f319a2347/out/native now points at sectioned native-8913dc56..., despite the detached worktree retaining original scripts/build-vt. Relative rerun-if-changed timestamps across worktrees allow native output reuse. Discarding affected sweep rows; replaying with explicit touch of the unchanged native build script/recipe at every checkpoint. Original retained production/dev binaries remain intact; final head will also be rebuilt after baseline replay before its gate.

Finding: the shared Cargo target reused the cut native archive in the baseline sweep. Exact original 85368c7f unexpectedly measured 22,263,504 B (the cut-1 size) instead of 22,580,816 B; infraternal-shim-3b145c0f319a2347/out/native now points at sectioned native-8913dc56..., despite the detached worktree retaining original scripts/build-vt. Relative rerun-if-changed timestamps across worktrees allow native output reuse. Discarding affected sweep rows; replaying with explicit touch of the unchanged native build script/recipe at every checkpoint. Original retained production/dev binaries remain intact; final head will also be rebuilt after baseline replay before its gate.
kayg commented 2026-10-13 06:23:18 +00:00
Author
Owner
Copy link

Finding confirmed: forcing the unchanged native recipe/build-script watch at original 85368c7f restores exact dev sizes: x86_64 22,580,816 B; ARM 19,986,840 B. The baseline native symlinks now point to the unsectioned cache entries (x86 native-04a42f..., ARM native-3cfe44...). This validates the retained cut baselines. Clean checkpoint replay follows; contaminated sweep rows will not be reported as attribution. Head will be invalidated/rebuilt after replay and must still match the new exact caps.

Finding confirmed: forcing the unchanged native recipe/build-script watch at original 85368c7f restores exact dev sizes: x86_64 22,580,816 B; ARM 19,986,840 B. The baseline native symlinks now point to the unsectioned cache entries (x86 native-04a42f..., ARM native-3cfe44...). This validates the retained cut baselines. Clean checkpoint replay follows; contaminated sweep rows will not be reported as attribution. Head will be invalidated/rebuilt after replay and must still match the new exact caps.
kayg commented 2026-10-13 10:17:01 +00:00
Author
Owner
Copy link

Evidence step committed and pushed: 88e8a0da. Clean replay now reproduces dev 85368c7f at 22,580,816 B x86_64 / 19,986,840 B aarch64. The native cache contamination described earlier is excluded from the evidence.

Direct production ancestry, x86_64 stripped:

Revision Bytes Growth
production 9ab4329c 20,333,104 baseline
production integration bdf68a6c 22,469,168 +2,136,064 retained dev features
SSH repair 52f64477 22,473,264 +4,096
mesh access 5e383c3d 22,534,320 +61,056
inventory 85368c7f 22,580,816 +46,496

Historical merge checkpoint builds, crate/feature attribution, ELF section accounting, both-arch artifact hashes and raw perf-machine logs are committed under docs/verification/size-ratchet/. README distinguishes historical checkpoint intervals from the direct production ancestry and rounded text costs from removable file savings.

Cut x86_64 saved aarch64 saved
722af2a3 native sections 317,312 B 305,728 B
5ae7cbf2 shared metadata construction 59,200 B 42,368 B
total 376,512 B 348,096 B

Exact caps: 22,204,304 / 19,638,744 B, zero allowance. Both +1-byte growth and unratcheted shrink fail. Features/providers are retained. Owner feature-loss candidates and nonadditive byte estimates are listed in README: mesh/plugin ~417 KiB plus server glue, host-daemon path/control ~141.8 KiB, remote integration ~40.9 KiB, server growth ~0.4 MiB, CLI ~92.5 KiB and signed update actions ~47.3 KiB. Ring stays (D257).

Final scripts/verify fast is running on pushed head 88e8a0da, with fresh native watches after historical replay, CARGO_TARGET_DIR in job scratch, RUST_TEST_THREADS=2 and unique TRACER_TEST_PORT=4298. Runtime evidence is exclusively the locked perf VM; functional gate diagnostics on this build host are not performance evidence.

Evidence step committed and pushed: 88e8a0da. Clean replay now reproduces dev 85368c7f at 22,580,816 B x86_64 / 19,986,840 B aarch64. The native cache contamination described earlier is excluded from the evidence. Direct production ancestry, x86_64 stripped: | Revision | Bytes | Growth | | --- | ---: | ---: | | production 9ab4329c | 20,333,104 | baseline | | production integration bdf68a6c | 22,469,168 | +2,136,064 retained dev features | | SSH repair 52f64477 | 22,473,264 | +4,096 | | mesh access 5e383c3d | 22,534,320 | +61,056 | | inventory 85368c7f | 22,580,816 | +46,496 | Historical merge checkpoint builds, crate/feature attribution, ELF section accounting, both-arch artifact hashes and raw perf-machine logs are committed under docs/verification/size-ratchet/. README distinguishes historical checkpoint intervals from the direct production ancestry and rounded text costs from removable file savings. | Cut | x86_64 saved | aarch64 saved | | --- | ---: | ---: | | 722af2a3 native sections | 317,312 B | 305,728 B | | 5ae7cbf2 shared metadata construction | 59,200 B | 42,368 B | | total | 376,512 B | 348,096 B | Exact caps: 22,204,304 / 19,638,744 B, zero allowance. Both +1-byte growth and unratcheted shrink fail. Features/providers are retained. Owner feature-loss candidates and nonadditive byte estimates are listed in README: mesh/plugin ~417 KiB plus server glue, host-daemon path/control ~141.8 KiB, remote integration ~40.9 KiB, server growth ~0.4 MiB, CLI ~92.5 KiB and signed update actions ~47.3 KiB. Ring stays (D257). Final scripts/verify fast is running on pushed head 88e8a0da, with fresh native watches after historical replay, CARGO_TARGET_DIR in job scratch, RUST_TEST_THREADS=2 and unique TRACER_TEST_PORT=4298. Runtime evidence is exclusively the locked perf VM; functional gate diagnostics on this build host are not performance evidence.
kayg commented 2026-10-13 10:27:05 +00:00
Author
Owner
Copy link

Full gate first attempt found a transient socket-allocation collision in the unchanged path-capability test: crates/infraternal-agent/src/remote_client_tests.rs:603 binds TCP to an independently allocated UDP port and got OS error 98 (AddrInUse). This file is identical to 85368c7f; no terminal/parser/auth assertion failed. vt_credit passed. The same compiled real-engine test immediately passes alone, with both native and fallback paths. Retry output:


running 1 test
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 109 filtered out; finished in 0.25s

The first gate continues through static builds for artifact evidence. I will rerun the complete gate with one test thread; this collision is not being waived. A final green head gate is still required.

Full gate first attempt found a transient socket-allocation collision in the unchanged path-capability test: crates/infraternal-agent/src/remote_client_tests.rs:603 binds TCP to an independently allocated UDP port and got OS error 98 (AddrInUse). This file is identical to 85368c7f; no terminal/parser/auth assertion failed. vt_credit passed. The same compiled real-engine test immediately passes alone, with both native and fallback paths. Retry output: ``` running 1 test test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 109 filtered out; finished in 0.25s ``` The first gate continues through static builds for artifact evidence. I will rerun the complete gate with one test thread; this collision is not being waived. A final green head gate is still required.
kayg commented 2026-10-13 10:30:59 +00:00
Author
Owner
Copy link

First full-gate static link failed because the shared Cargo target retained CLI build-script output pointing at the removed historical checkout:

ld.lld: error: cannot find linker script /home/kayg/.cache/codex-scratch/size-ratchet/worktrees/prod/crates/infraternal/handoff-note.ld

I removed that checkout too early. Native watches alone do not invalidate the CLI absolute linker-script path emitted by crates/infraternal/build.rs. All repository build.rs files and scripts/build-vt have now been touched without content changes, forcing build-script output to come from the branch worktree. No source fix or gate waiver is introduced.

Full scripts/verify fast restarted at unchanged pushed head 88e8a0da with RUST_TEST_THREADS=1, PYTHONDONTWRITEBYTECODE=1 and TRACER_TEST_PORT=4298. First-run rows: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; cargo-deny PASS; test FAIL (the previously recorded transient port collision); static builds FAIL (stale linker-script path above). Final green gate is still required.

First full-gate static link failed because the shared Cargo target retained CLI build-script output pointing at the removed historical checkout: ``` ld.lld: error: cannot find linker script /home/kayg/.cache/codex-scratch/size-ratchet/worktrees/prod/crates/infraternal/handoff-note.ld ``` I removed that checkout too early. Native watches alone do not invalidate the CLI absolute linker-script path emitted by crates/infraternal/build.rs. All repository build.rs files and scripts/build-vt have now been touched without content changes, forcing build-script output to come from the branch worktree. No source fix or gate waiver is introduced. Full scripts/verify fast restarted at unchanged pushed head 88e8a0da with RUST_TEST_THREADS=1, PYTHONDONTWRITEBYTECODE=1 and TRACER_TEST_PORT=4298. First-run rows: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; cargo-deny PASS; test FAIL (the previously recorded transient port collision); static builds FAIL (stale linker-script path above). Final green gate is still required.
kayg commented 2026-10-13 11:00:37 +00:00
Author
Owner
Copy link

Finished #198 at pushed size-ratchet head 88e8a0dad8. No deploy; no feature or crypto-provider removal. All final head gate rows pass. The initial transient port collision and stale historical linker-script path are resolved by the recorded isolated retry / full single-thread gate and fresh build-script watches, without source changes.

Architecture Original dev Final stripped / exact cap Saved
x86_64 22,580,816 B 22,204,304 B 376,512 B
aarch64 19,986,840 B 19,638,744 B 348,096 B

Cuts: 722af2a3 native sections save 317,312 / 305,728 B; 5ae7cbf2 concrete metadata helpers save 59,200 / 42,368 B. Archive exports (182), all 54 public skill/help pairs plus index/root help (110 outputs), and features are preserved. Gate allowance is zero; +1 B fails and shrink requires a downward ratchet. At 1,000 nodes total executable storage savings are 376,512,000 / 348,096,000 B, not an RSS or compressed-transfer claim.

Growth by crate/feature (cargo-bloat diagnostic .text estimates; rounded, generic attribution overlaps; not additive feature-off file savings):

Crate / feature Production .text Dev .text Growth estimate Reason
infraternal-server 2.4 MiB 2.8 MiB ~0.4 MiB Mesh coordination/path wiring, CLI and admitted-host inventory
plugin-mesh 234.1 KiB 545.1 KiB 311.0 KiB Node runtime, access enforcement and coordinator actions
infraternal-agent 318.1 KiB 459.9 KiB 141.8 KiB Plugin control, preferred/standby paths and primed writers
infraternal-mesh 3.0 KiB 109.0 KiB 106.0 KiB Active kernel data plane and lifecycle
CLI infraternal 276.1 KiB 368.6 KiB 92.5 KiB Declared actions, help/skills and component adaptation
plugin-release absent 47.3 KiB 47.3 KiB Runtime signed update/handoff action implementation
plugin-remote 76.2 KiB 117.1 KiB 40.9 KiB Transport/control capability integration
plugin-api 12.2 KiB 48.2 KiB 36.0 KiB Shared action contracts and host interface
serde_json 120.9 KiB 204.8 KiB 83.9 KiB Additional typed JSON instantiations
serde_core 26.4 KiB 102.2 KiB 75.8 KiB Serialization/deserialization glue
sqlx_core 172.6 KiB 222.8 KiB 50.2 KiB Additional queries/row types
tokio 314.8 KiB 355.6 KiB 40.8 KiB Additional task/future instantiations
plugin-ssh 228.5 KiB 237.4 KiB 8.9 KiB Production repair/probe integration
shim 217.2 KiB 220.8 KiB 3.6 KiB Session lifecycle integration
ring / rustls / OpenSSL 243.9 KiB / 352.6 KiB / 1.9 MiB same estimates effectively unchanged Required providers/transports remain

Clean historical development checkpoints (shipping x86_64 recipe; these are checkpoint intervals, not a linear sequence from production):

Checkpoint Change Bytes Delta from preceding checkpoint
47f2b31b CLI integration 16,698,208 —
0510bd85 UI platform integration 16,698,208 0
bf28c10a Mesh integration / restored shipping defaults 21,315,408 +4,617,200
7db21709 Signed release integration 21,715,536 +400,128
dedcc2a3 D215 transport integration 22,308,720 +593,184
f2a4b36d Production fixes backmerge 22,438,672 +129,952
73ce87a7 Handoff deployment integration 22,464,880 +26,208
bdf68a6c Production live integration 22,469,168 +4,288
52f64477 SSH home-alias repair 22,473,264 +4,096
5e383c3d Mesh access integration 22,534,320 +61,056
85368c7f Bounded admitted-host inventory 22,580,816 +46,496

Direct production ancestry: 9ab4329c 20,333,104 B → bdf68a6c 22,469,168 B (+2,136,064 retained development features) → SSH repair +4,096 → mesh access +61,056 → inventory +46,496 = 22,580,816 B. Total production-to-dev growth: 2,247,712 B x86_64 / 1,874,600 B aarch64. Both production and original dev endpoint sizes are reproduced. The contaminated native-cache sweep is discarded.

Retained costs requiring owner feature-loss decisions: mesh plugin/engine ~417 KiB text plus server/task glue; infraternal agent control/path growth 141.8 KiB; remote integration 40.9 KiB; server growth ~0.4 MiB; CLI adaptation 92.5 KiB; signed-update actions 47.3 KiB. Ring remains (D257). Disabling two AVX-512 AES-GCM functions (675,280 symbol bytes) would require D257's separate hardware-specific evidence; they remain. These are diagnostic text costs, not promised independent savings.

Evidence: docs/verification/size-ratchet/README.md, clean merge-sizes.tsv, both-arch artifact manifest, symbol/ELF accounting and raw locked perf-VM logs. Perf probes cover one real PTY and interleaved cold CLI starts; no fleet-scale latency claim. Metadata's 24–51 µs median startup cost is recorded against its 59,200 B x86_64 saving. Temporary historical checkout and perf VM job files are removed; build scratch is removed after this transcript is recorded.

Fresh final artifact identities (the retained artifact manifest identifies the earlier measured cut candidates, rather than claiming bit-for-bit rebuild reproducibility):

[
  {
    "arch": "x86_64",
    "bytes": 22204304,
    "sha256": "59e71ae4b035f0d448693a9851a45374bca095b5b9db4f1ffc97aabe65f9de7a"
  },
  {
    "arch": "aarch64",
    "bytes": 19638744,
    "sha256": "9d7e5fdebbaaf3363e3df2b81968e6b10c06689f4f0a401b3481a2e7bf0a8be1"
  }
]

Fresh head vs metadata benchmark candidate public-output equivalence:

CLI equivalence: 54 public skills and command help outputs plus root help and index are byte-identical

Fresh x86_64 and the metadata candidate have identical ELF section sizes/offsets, with 48,492 different bytes (42,566 rodata; 3,696 text; 2,132 data.rel.ro; 98 data). Source code is unchanged since the metadata cut; the final artifact is functionally verified separately. No bit-for-bit binary reproducibility or exact-hash runtime benchmark claim is made.

Final scripts/verify fast exit 0 on the head above. Environment: job CARGO_TARGET_DIR, unique TRACER_TEST_PORT=4298, RUST_TEST_THREADS=1, PYTHONDONTWRITEBYTECODE=1. Build-host test durations are functional diagnostics, not performance evidence. Complete stdout/stderr follows verbatim in ordered comments, SHA-256 268cbb89f7c201f2103c84f8ce49d0c45db4cfebeae646584ae967f51c95c65a (311539 bytes).

Finished #198 at pushed size-ratchet head 88e8a0dad8f865d004986e794ea82bba498959ea. No deploy; no feature or crypto-provider removal. All final head gate rows pass. The initial transient port collision and stale historical linker-script path are resolved by the recorded isolated retry / full single-thread gate and fresh build-script watches, without source changes. | Architecture | Original dev | Final stripped / exact cap | Saved | | --- | ---: | ---: | ---: | | x86_64 | 22,580,816 B | 22,204,304 B | 376,512 B | | aarch64 | 19,986,840 B | 19,638,744 B | 348,096 B | Cuts: 722af2a3 native sections save 317,312 / 305,728 B; 5ae7cbf2 concrete metadata helpers save 59,200 / 42,368 B. Archive exports (182), all 54 public skill/help pairs plus index/root help (110 outputs), and features are preserved. Gate allowance is zero; +1 B fails and shrink requires a downward ratchet. At 1,000 nodes total executable storage savings are 376,512,000 / 348,096,000 B, not an RSS or compressed-transfer claim. Growth by crate/feature (cargo-bloat diagnostic .text estimates; rounded, generic attribution overlaps; not additive feature-off file savings): | Crate / feature | Production .text | Dev .text | Growth estimate | Reason | | --- | ---: | ---: | ---: | --- | | infraternal-server | 2.4 MiB | 2.8 MiB | ~0.4 MiB | Mesh coordination/path wiring, CLI and admitted-host inventory | | plugin-mesh | 234.1 KiB | 545.1 KiB | 311.0 KiB | Node runtime, access enforcement and coordinator actions | | infraternal-agent | 318.1 KiB | 459.9 KiB | 141.8 KiB | Plugin control, preferred/standby paths and primed writers | | infraternal-mesh | 3.0 KiB | 109.0 KiB | 106.0 KiB | Active kernel data plane and lifecycle | | CLI infraternal | 276.1 KiB | 368.6 KiB | 92.5 KiB | Declared actions, help/skills and component adaptation | | plugin-release | absent | 47.3 KiB | 47.3 KiB | Runtime signed update/handoff action implementation | | plugin-remote | 76.2 KiB | 117.1 KiB | 40.9 KiB | Transport/control capability integration | | plugin-api | 12.2 KiB | 48.2 KiB | 36.0 KiB | Shared action contracts and host interface | | serde_json | 120.9 KiB | 204.8 KiB | 83.9 KiB | Additional typed JSON instantiations | | serde_core | 26.4 KiB | 102.2 KiB | 75.8 KiB | Serialization/deserialization glue | | sqlx_core | 172.6 KiB | 222.8 KiB | 50.2 KiB | Additional queries/row types | | tokio | 314.8 KiB | 355.6 KiB | 40.8 KiB | Additional task/future instantiations | | plugin-ssh | 228.5 KiB | 237.4 KiB | 8.9 KiB | Production repair/probe integration | | shim | 217.2 KiB | 220.8 KiB | 3.6 KiB | Session lifecycle integration | | ring / rustls / OpenSSL | 243.9 KiB / 352.6 KiB / 1.9 MiB | same estimates | effectively unchanged | Required providers/transports remain | Clean historical development checkpoints (shipping x86_64 recipe; these are checkpoint intervals, not a linear sequence from production): | Checkpoint | Change | Bytes | Delta from preceding checkpoint | | --- | --- | ---: | ---: | | 47f2b31b | CLI integration | 16,698,208 | — | | 0510bd85 | UI platform integration | 16,698,208 | 0 | | bf28c10a | Mesh integration / restored shipping defaults | 21,315,408 | +4,617,200 | | 7db21709 | Signed release integration | 21,715,536 | +400,128 | | dedcc2a3 | D215 transport integration | 22,308,720 | +593,184 | | f2a4b36d | Production fixes backmerge | 22,438,672 | +129,952 | | 73ce87a7 | Handoff deployment integration | 22,464,880 | +26,208 | | bdf68a6c | Production live integration | 22,469,168 | +4,288 | | 52f64477 | SSH home-alias repair | 22,473,264 | +4,096 | | 5e383c3d | Mesh access integration | 22,534,320 | +61,056 | | 85368c7f | Bounded admitted-host inventory | 22,580,816 | +46,496 | Direct production ancestry: 9ab4329c 20,333,104 B → bdf68a6c 22,469,168 B (+2,136,064 retained development features) → SSH repair +4,096 → mesh access +61,056 → inventory +46,496 = 22,580,816 B. Total production-to-dev growth: 2,247,712 B x86_64 / 1,874,600 B aarch64. Both production and original dev endpoint sizes are reproduced. The contaminated native-cache sweep is discarded. Retained costs requiring owner feature-loss decisions: mesh plugin/engine ~417 KiB text plus server/task glue; infraternal agent control/path growth 141.8 KiB; remote integration 40.9 KiB; server growth ~0.4 MiB; CLI adaptation 92.5 KiB; signed-update actions 47.3 KiB. Ring remains (D257). Disabling two AVX-512 AES-GCM functions (675,280 symbol bytes) would require D257's separate hardware-specific evidence; they remain. These are diagnostic text costs, not promised independent savings. Evidence: docs/verification/size-ratchet/README.md, clean merge-sizes.tsv, both-arch artifact manifest, symbol/ELF accounting and raw locked perf-VM logs. Perf probes cover one real PTY and interleaved cold CLI starts; no fleet-scale latency claim. Metadata's 24–51 µs median startup cost is recorded against its 59,200 B x86_64 saving. Temporary historical checkout and perf VM job files are removed; build scratch is removed after this transcript is recorded. Fresh final artifact identities (the retained artifact manifest identifies the earlier measured cut candidates, rather than claiming bit-for-bit rebuild reproducibility): ```json [ { "arch": "x86_64", "bytes": 22204304, "sha256": "59e71ae4b035f0d448693a9851a45374bca095b5b9db4f1ffc97aabe65f9de7a" }, { "arch": "aarch64", "bytes": 19638744, "sha256": "9d7e5fdebbaaf3363e3df2b81968e6b10c06689f4f0a401b3481a2e7bf0a8be1" } ] ``` Fresh head vs metadata benchmark candidate public-output equivalence: ```text CLI equivalence: 54 public skills and command help outputs plus root help and index are byte-identical ``` Fresh x86_64 and the metadata candidate have identical ELF section sizes/offsets, with 48,492 different bytes (42,566 rodata; 3,696 text; 2,132 data.rel.ro; 98 data). Source code is unchanged since the metadata cut; the final artifact is functionally verified separately. No bit-for-bit binary reproducibility or exact-hash runtime benchmark claim is made. Final scripts/verify fast exit 0 on the head above. Environment: job CARGO_TARGET_DIR, unique TRACER_TEST_PORT=4298, RUST_TEST_THREADS=1, PYTHONDONTWRITEBYTECODE=1. Build-host test durations are functional diagnostics, not performance evidence. Complete stdout/stderr follows verbatim in ordered comments, SHA-256 268cbb89f7c201f2103c84f8ce49d0c45db4cfebeae646584ae967f51c95c65a (311539 bytes).
kayg commented 2026-10-13 11:00:38 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 1/8; head 88e8a0dad8.


==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.656s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.085s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [159.56ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [180.24ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [171.46ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [515.00ms]
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=288.08 p99_ms=305.52 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim)
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.28s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal-d0028d263474a180)

running 25 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal)
    Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh)
    Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts)
    Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release)
    Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay)
    Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup)
    Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote)
    Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 9.12s

==> test
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal)
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 28.94s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal-ff26c3ff78ebab6f)

running 77 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 28.51s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_daemon-655727f9f0cc0d46)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.55s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_queues-0db8eea61c377b38)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.04s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_review-30a33faa48ae32cc)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.09s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_sessions-8e431b0b38cea6e6)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/idle_canary-be7f97f2723a1f42)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/key_memory-540eb1e738739f76)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/remote_output-e3f64bf80a5c5efa)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_bounds_review-52d8c640e8ddf537)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.27s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_exit_events-bafddf2afef7b798)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.72s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_retention-13964017ec49e430)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.77s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/setup_output-80a777d2e95dde79)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/shim-0b450d7b32e83e12)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.02s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/ssh_askpass-92b924c5ea0a32fa)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 3.20s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/vt_credit-393a6c6d6c7b57f0)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.04s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/vt_reconnect-a434ebf1242fcdb9)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.78s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_agent-a1f8a8c7795816f5)

running 110 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok
test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok
test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok
test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok
test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 26.00s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/transport-0c6a2226704f5d95)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_mesh-b05cf1923316cb2f)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/default_arrow-c3dcd9519cdc97fa)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/properties-5179c55b52944b40)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.44s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/rotation_time-a76bcb54ef244af6)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 20 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507)

running 36 tests
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
Final scripts/verify fast transcript 1/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.656s OK . ---------------------------------------------------------------------- Ran 1 test in 0.085s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [159.56ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [180.24ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [171.46ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [515.00ms] METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=288.08 p99_ms=305.52 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim) Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 1.28s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal-d0028d263474a180) running 25 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal) Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh) Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts) Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release) Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay) Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup) Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote) Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 9.12s ==> test Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal) Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent) Finished `test` profile [unoptimized + debuginfo] target(s) in 28.94s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal-ff26c3ff78ebab6f) running 77 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 28.51s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_daemon-655727f9f0cc0d46) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.55s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_queues-0db8eea61c377b38) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.04s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_review-30a33faa48ae32cc) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.09s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/agent_sessions-8e431b0b38cea6e6) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/idle_canary-be7f97f2723a1f42) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/key_memory-540eb1e738739f76) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/remote_output-e3f64bf80a5c5efa) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_bounds_review-52d8c640e8ddf537) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.27s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_exit_events-bafddf2afef7b798) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.72s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/session_retention-13964017ec49e430) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.77s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/setup_output-80a777d2e95dde79) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/shim-0b450d7b32e83e12) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.02s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/ssh_askpass-92b924c5ea0a32fa) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 3.20s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/vt_credit-393a6c6d6c7b57f0) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.04s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/vt_reconnect-a434ebf1242fcdb9) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.78s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_agent-a1f8a8c7795816f5) running 110 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 26.00s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/transport-0c6a2226704f5d95) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_mesh-b05cf1923316cb2f) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/default_arrow-c3dcd9519cdc97fa) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/properties-5179c55b52944b40) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.44s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/rotation_time-a76bcb54ef244af6) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 20 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507) running 36 tests test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok ```
kayg commented 2026-10-13 11:00:39 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 2/8; head 88e8a0dad8.

test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok

test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/authorized_local_binding-02e1712d695000e1)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/canonical_host_binding-916e8fce54d8a01d)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/configuration-6f70d40a46624bab)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/kernel-5b936888583d9b02)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_snapshot_ordering-786d38945646c0be)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/restart_route_ownership-992b255b044a9651)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_firewall_marker-ad98c08959d40740)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_ingress_translation-9963f8f8e8768c22)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_local_delivery-19483e34d744b3a5)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_restart_routes-625128aab2b72d2b)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_route_scope-82ef3cd668a5c05b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/settings-09c6f45130d46b90)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/store-85e53d30e28569e2)

running 5 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.60s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_pool-a5ae45463b56b863)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.58s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_restart-d5419ea9777c8002)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1)

running 18 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.52s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad)

running 15 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/auth_order-f78cc1dee4b06c31)

running 7 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/build_removal-253a4c925e5f39ec)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/concurrency-be6c561d159ecb5d)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/config_isolation-36494b162d480b2b)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/credentials-ebf5e138f5fb987d)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.26s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/diagnostics-e49727da7f718425)

running 10 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/event_metadata-1e4844aa689cc5bb)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/foreground-dd7cdc0f2219b614)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/host_trust-0b542cac1c02e799)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/install-6999211aa6d0fbca)

running 48 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.05s

     Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_ssh-4a0f79768b79bf0e)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/model-aa5d54a8fa1538a1)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/payload_source-d6f1e1c864fc0b02)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/probe_check-f3b0fb8475856a2e)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/process-ee385aa3b6bba8e2)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/proxy_policy-6168b25c0aef8710)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/real_ssh-64ea6957d0d5a5fd)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/single_connection-3376e0f2c78cf37d)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/source_completeness-a25b442d7fcaea9f)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/trust_round2-941560f7296ab4d7)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_server-91a469d241a2f514)

running 465 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
Final scripts/verify fast transcript 2/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/authorized_local_binding-02e1712d695000e1) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/canonical_host_binding-916e8fce54d8a01d) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/configuration-6f70d40a46624bab) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/kernel-5b936888583d9b02) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/policy_snapshot_ordering-786d38945646c0be) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/restart_route_ownership-992b255b044a9651) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_firewall_marker-ad98c08959d40740) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_ingress_translation-9963f8f8e8768c22) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_local_delivery-19483e34d744b3a5) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_restart_routes-625128aab2b72d2b) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_route_scope-82ef3cd668a5c05b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/settings-09c6f45130d46b90) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/store.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/store-85e53d30e28569e2) running 5 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.60s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_pool-a5ae45463b56b863) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.58s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_restart-d5419ea9777c8002) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1) running 18 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.52s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad) running 15 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/auth_order-f78cc1dee4b06c31) running 7 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/build_removal-253a4c925e5f39ec) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/concurrency-be6c561d159ecb5d) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/config_isolation-36494b162d480b2b) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/credentials-ebf5e138f5fb987d) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.26s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/diagnostics-e49727da7f718425) running 10 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/event_metadata-1e4844aa689cc5bb) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/foreground-dd7cdc0f2219b614) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/host_trust-0b542cac1c02e799) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/install-6999211aa6d0fbca) running 48 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.05s Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_ssh-4a0f79768b79bf0e) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/model-aa5d54a8fa1538a1) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/payload_source-d6f1e1c864fc0b02) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/probe_check-f3b0fb8475856a2e) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/process.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/process-ee385aa3b6bba8e2) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/proxy_policy-6168b25c0aef8710) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/real_ssh-64ea6957d0d5a5fd) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/single_connection-3376e0f2c78cf37d) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/source_completeness-a25b442d7fcaea9f) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/trust_round2-941560f7296ab4d7) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_server-91a469d241a2f514) running 465 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok ```
kayg commented 2026-10-13 11:00:40 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 3/8; head 88e8a0dad8.

test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 419 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 561.52s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/catalog_startup-ec71f4283e741d89)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/enrollment-7997973c1f408dea)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.50s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_parser-a11bed8d1d607ff0)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_plugin-528f6046d03cdfce)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_role_scope-902722ff9982fa55)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/plugin_host_review-49f33e2f08350a85)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/plugin_settings_review-0663564c599d9896)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.34s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s

     Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_shim-7eaae763d080ce29)

running 93 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
Final scripts/verify fast transcript 3/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 419 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 561.52s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/catalog_startup-ec71f4283e741d89) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/enrollment-7997973c1f408dea) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.50s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_parser-a11bed8d1d607ff0) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_plugin-528f6046d03cdfce) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mesh_review_role_scope-902722ff9982fa55) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/plugin_host_review-49f33e2f08350a85) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/plugin_settings_review-0663564c599d9896) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.34s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/infraternal_shim-7eaae763d080ce29) running 93 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok ```
kayg commented 2026-10-13 11:00:41 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 4/8; head 88e8a0dad8.

test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.01s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 100.95s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/detach-c00818a1c892d25b)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.72s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mouse-23bf423bbf4a1258)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
Final scripts/verify fast transcript 4/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.01s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 100.95s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/detach-c00818a1c892d25b) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.72s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/mouse-23bf423bbf4a1258) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.81s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/size-ratchet/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) ```
kayg commented 2026-10-13 11:00:43 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 5/8; head 88e8a0dad8.

             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
Final scripts/verify fast transcript 5/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) ```
kayg commented 2026-10-13 11:00:44 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 6/8; head 88e8a0dad8.

      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
Final scripts/verify fast transcript 6/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/size-ratchet/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) ```
kayg commented 2026-10-13 11:00:45 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 7/8; head 88e8a0dad8.

      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api)
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal)
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 6m 02s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/size-ratchet/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 22204304 bytes (max 22204304; allowance 0)
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Command
  State   ready
  Detail  Key memory initialization=1; locked pages and dump exclusion enabled
  Next    Run this check under an 8 MiB memlock limit.
   Compiling cfg-if v1.0.5
   Compiling pin-project-lite v0.2.17
   Compiling bytes v1.12.1
   Compiling libc v0.2.190
   Compiling serde_core v1.0.229
   Compiling once_cell v1.21.4
   Compiling memchr v2.8.3
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling subtle v2.6.1
   Compiling slab v0.4.12
   Compiling tracing-core v0.1.36
   Compiling typenum v1.20.1
   Compiling writeable v0.6.4
   Compiling yoke v0.8.3
   Compiling litemap v0.8.3
   Compiling utf8_iter v1.0.4
   Compiling num-traits v0.2.19
   Compiling percent-encoding v2.3.2
   Compiling equivalent v1.0.2
   Compiling icu_properties_data v2.3.0
   Compiling tracing v0.1.44
   Compiling serde v1.0.229
   Compiling icu_normalizer_data v2.3.0
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling form_urlencoded v1.2.2
   Compiling hashbrown v0.17.1
   Compiling generic-array v0.14.7
   Compiling thiserror v2.0.21
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling mio v1.2.4
   Compiling cpufeatures v0.2.17
   Compiling futures-util v0.3.34
   Compiling scopeguard v1.2.0
   Compiling zmij v1.0.23
   Compiling openssl-sys v0.9.117
   Compiling futures-channel v0.3.34
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling signal-hook-registry v1.4.8
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling indexmap v2.14.2
   Compiling lock_api v0.4.14
   Compiling parking_lot_core v0.9.12
   Compiling serde_json v1.0.151
   Compiling icu_locale_core v2.3.0
   Compiling icu_collections v2.3.0
   Compiling tokio v1.53.2
   Compiling foldhash v0.1.5
   Compiling bitflags v2.13.2
   Compiling allocator-api2 v0.2.21
   Compiling digest v0.10.7
   Compiling rand_core v0.10.1
   Compiling parking_lot v0.12.5
   Compiling crossbeam-utils v0.8.23
   Compiling either v1.18.0
   Compiling ryu v1.0.23
   Compiling hashbrown v0.15.5
   Compiling parking v2.2.1
   Compiling icu_provider v2.3.1
   Compiling base64 v0.22.1
   Compiling crc-catalog v2.5.0
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling event-listener v5.4.2
   Compiling serde_urlencoded v0.7.1
   Compiling crc v3.4.0
   Compiling sha2 v0.10.9
   Compiling zerocopy v0.8.60
   Compiling hashlink v0.10.0
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling spin v0.9.9
   Compiling getrandom v0.2.17
   Compiling libsqlite3-sys v0.30.1
   Compiling futures-executor v0.3.34
   Compiling getrandom v0.4.3
   Compiling atoi v2.0.0
   Compiling foreign-types-shared v0.1.1
   Compiling http v1.5.0
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api)
   Compiling zeroize v1.9.0
   Compiling flume v0.11.1
   Compiling foreign-types v0.3.2
   Compiling ring v0.17.14
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling idna_adapter v1.2.2
   Compiling tokio-stream v0.1.19
   Compiling arrayvec v0.7.8
   Compiling minimal-lexical v0.2.1
   Compiling uuid v1.27.0
   Compiling idna v1.1.0
   Compiling nix v0.30.1
   Compiling rand_core v0.9.5
   Compiling powerfmt v0.2.1
   Compiling nom v7.1.3
   Compiling untrusted v0.9.0
   Compiling http-body v1.1.0
   Compiling num-conv v0.2.2
   Compiling url v2.5.8
   Compiling time-core v0.1.9
   Compiling deranged v0.5.8
   Compiling thiserror v1.0.69
   Compiling httparse v1.10.1
   Compiling tokio-util v0.7.19
   Compiling rustls-pki-types v1.15.1
   Compiling sqlx-core v0.8.6
   Compiling rusticata-macros v4.1.0
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling tinyvec v1.13.3
   Compiling rand_core v0.6.4
   Compiling chacha20 v0.10.2
   Compiling num-integer v0.1.47
   Compiling ppv-lite86 v0.2.21
   Compiling time v0.3.55
   Compiling base64 v0.21.7
   Compiling try-lock v0.2.5
   Compiling lazy_static v1.5.1
   Compiling httpdate v1.0.3
   Compiling atomic-waker v1.1.2
   Compiling fnv v1.0.7
   Compiling sqlx-sqlite v0.8.6
   Compiling want v0.3.2
   Compiling rand_chacha v0.9.0
   Compiling base64urlsafedata v0.5.5
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim)
   Compiling rand v0.10.3
   Compiling num-bigint v0.4.8
   Compiling h2 v0.4.19
   Compiling vte v0.15.0
   Compiling rand_pcg v0.10.2
   Compiling rand v0.9.5
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-protocol)
   Compiling rustc-hash v2.1.3
   Compiling tower-layer v0.3.3
   Compiling sqlx v0.8.6
   Compiling asn1-rs v0.6.2
   Compiling mime v0.3.17
   Compiling lru-slab v0.1.3
   Compiling quinn-udp v0.5.16
   Compiling half v2.7.1
   Compiling http-body-util v0.1.5
   Compiling sha1 v0.10.7
   Compiling utf8parse v0.2.2
   Compiling regex-syntax v0.8.11
   Compiling oid-registry v0.7.1
   Compiling der-parser v9.0.0
   Compiling sync_wrapper v1.0.2
   Compiling serde_cbor_2 v0.13.0
   Compiling tungstenite v0.29.0
   Compiling anstyle-parse v1.0.0
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh)
   Compiling hyper v1.11.1
   Compiling regex-automata v0.4.18
   Compiling webauthn-rs-proto v0.5.5
   Compiling x509-parser v0.16.0
   Compiling rand_chacha v0.3.1
   Compiling rustls v0.23.45
   Compiling hex-conservative v0.2.3
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle v1.0.14
   Compiling hex v0.4.3
   Compiling unicase v2.10.0
   Compiling anstyle-query v1.1.5
   Compiling colorchoice v1.0.5
   Compiling base64ct v1.8.3
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling hyper-util v0.1.21
   Compiling tokio-tungstenite v0.29.0
   Compiling arc-swap v1.9.2
   Compiling mime_guess v2.0.5
   Compiling anstream v1.0.0
   Compiling fs-err v3.3.2
   Compiling password-hash v0.5.0
   Compiling rustls-webpki v0.103.15
   Compiling matchers v0.2.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts)
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling strsim v0.11.1
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling clap_lex v1.1.1
   Compiling http-range-header v0.4.2
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup)
   Compiling tower-http v0.6.11
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling clap_builder v4.6.7
   Compiling quinn-proto v0.11.19
   Compiling clap v4.6.7
   Compiling quinn v0.11.12
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent)
   Compiling webauthn-rs v0.5.5
    Finished `release` profile [optimized] target(s) in 4m 13s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/size-ratchet/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19638744 bytes (max 19638744; allowance 0)
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 22204304-byte cap PASS; 22204305 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19638744-byte cap PASS; 19638745 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
server subcommand: exit 2, versioned JSON unavailable result
agent subcommand: exit 2, versioned JSON unavailable result

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [413.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [27.44ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [19.24ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.94ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.08ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.23ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.18ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.10ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.19ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.24ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.24ms]
(pass) repeating the front item changes nothing [0.07ms]
(pass) the list is capped, so the oldest items fall off [0.06ms]
(pass) top skips items that are no longer live, without losing them [0.08ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.15ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.03ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.42ms]
(pass) routine connection states stay out of the toast [0.05ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.35ms]
(pass) a deferred new:below selection retains its original window [0.03ms]
(pass) a deferred close selection retains its original window [0.01ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.82ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.24ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.21ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.18ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.14ms]
(pass) before facts arrive the host's platform names the header [0.06ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.07ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.57ms]
(pass) without `access` (today's server) the person may view and may not edit [0.27ms]
(pass) fields the server does not send are absent, never invented [0.23ms]
(pass) anything that is not a list is refused, whole [4.95ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.20ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.25ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.12ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.12ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.99ms]
(pass) the layout is deterministic and does not depend on input order [4.94ms]
(pass) no two cards overlap, and every card lies inside the graph [6.98ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.63ms]
(pass) a pinned node stays where it was put and the others do not move [2.59ms]
(pass) a pin beyond the sheet grows the graph [0.43ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.26ms]
(pass) 1,000 nodes lay out in a few milliseconds [8.25ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.50ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.19ms]
(pass) a view taller than the viewport is scaled down so it fits [0.04ms]
(pass) nearestStop picks the stop whose centre is closest [0.15ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.25ms]
(pass) a small graph keeps one stop per node column [0.12ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.08ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.12ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.67ms]
(pass) closing the new half gives the layout back exactly, in the model [1.42ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.53ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.34ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.58ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.52ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.20ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.25ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.12ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.14ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [60.92ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.52ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.16ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.59ms]
(pass) a chain of neighbours is pushed in turn [0.11ms]
(pass) snapping rounds to whole cells [0.05ms]
(pass) reach follows grants through tags and keeps the relay [0.30ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.40ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.63ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.55ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [2.19ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.70ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.25ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.25ms]
(pass) a final Close before the first positive census never revives a new ID [0.15ms]
(pass) a later absence retires a new ID after its first positive census [0.17ms]
(pass) another host's census cannot clear a new shell's census fence [0.13ms]
(pass) another host's close cannot clear a new shell's census fence [0.03ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.42ms]
(pass) a detected operating system supplies the live popover mark [1.21ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.13ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.27ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.07ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.12ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.45ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.30ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [1.17ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.23ms]
(pass) a removal in another browser withdraws the host [0.22ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.32ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.45ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.59ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.34ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.20ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [16.38ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [13.01ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.00ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.39ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.84ms]
(pass) oversized refusal JSON is ignored before parsing [0.11ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.52ms]
(pass) a document survives JSON and rebuilds the same columns [0.78ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms]
(pass) parseDocument rejects anything that is not a document of this format [0.30ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.19ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.30ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.24ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.66ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.14ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.16ms]
(pass) review listed inventory name plus port retains its resolved address [0.24ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.41ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.09ms]
(pass) parsing the server's data > an install command needs a lifetime [0.08ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.44ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.29ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.75ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.35ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.22ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.39ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.64ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [4.35ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.31ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.24ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.17ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.17ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.10ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.11ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.11ms]
(pass) authLabel > names the method and a trusted network provider only [0.04ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.11ms]
(pass) guideFor > each failure kind names its fix [0.12ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.09ms]
(pass) parseTarget > refuses what cannot name a host [0.04ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.69ms]
(pass) parseSshConfig > recognises config text [0.10ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.10ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.14ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.67ms]
(pass) only a completed canonical host identity becomes terminal authority [0.38ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.18ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.04ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.07ms]
(pass) missing payload tells the operator the architecture and expected server path [0.05ms]
(pass) an already added host says so and offers opening its existing terminal [0.03ms]
(pass) release payload verification names the architecture step and plain reason [0.04ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.15ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.08ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.51ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.33ms]
(pass) ready CA begins the requested installation mode without another prompt [0.09ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.28ms]
(pass) a typed root login requires explicit consent before any installation [0.13ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [1.07ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.49ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.73ms]
(pass) a chunk that both sides use stays critical [0.17ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.12ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.11ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [2.88ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.57ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.56ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [10.98ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [21.55ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [9.35ms]
(pass) abandoned word acknowledgement uploads nothing [3.53ms]
(pass) settled acknowledgement cannot upload later (dismissed) [3.52ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.08ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [2.22ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [1.63ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.68ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.57ms]
(pass) malformed or excessive remaining wait -1 is denied [2.45ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.38ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.60ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.82ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.67ms]

 191 pass
 0 fail
 11387 expect() calls
Ran 191 tests across 31 files. [449.00ms]
$ bun run build.ts
built chunk-45e8w4af.js, chunk-sjr84a7q.js, chunk-1y0k7gwq.js, chunk-4dh812dh.js, chunk-vmkf0ye4.js, chunk-9j95sedx.js, chunk-gxvqf3b8.js, chunk-1f4exzmv.js, chunk-cgsn1ga9.js, chunk-vk86kn85.js, chunk-nfsjyeyd.js, chunk-ytpxqt0e.js, main.js, chunk-p938y84p.js, chunk-4myrwgrb.js, chunk-3st0hg2d.js, chunk-64xwg9x5.js, chunk-cc2chr3c.js, chunk-rgh1mqz4.js, chunk-hsvc2xj7.js, chunk-yr0r38s4.js, chunk-a52hbfka.js, chunk-gff23rqs.js, chunk-ppq71z31.js, chunk-mrdwpq35.js, chunk-rndw0grg.js, chunk-axbkkqp1.js, chunk-gtp0zmcg.js, chunk-t3tsjhs1.js, chunk-0n8q01qb.js, chunk-nj9dpjve.js, chunk-dj88c5nr.js, chunk-thzvmxda.js, chunk-am68jddx.js, chunk-fdxcmr71.js, chunk-rbr0gsfd.js, chunk-5aqtvhsp.js, chunk-0646ejav.js, chunk-7n9ytkxe.js, chunk-pdzjp0te.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-ac125z5n.js, chunk-bbjhz7vm.js, chunk-w4z2w8cn.js, chunk-3y5a3ksx.js, chunk-1hn168n2.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-w6s1ygar.js, chunk-f2r0hhqc.js, chunk-p34rqwxp.js, chunk-8wn2fegk.js, chunk-8rc2cx0f.js
critical chunk-rgh1mqz4.js: identity=590 gzip=327 brotli=301 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-a52hbfka.js: identity=1104 gzip=666 brotli=605 bytes
critical chunk-8rc2cx0f.js: identity=42534 gzip=14525 brotli=13052 bytes
onDemand chunk-rbr0gsfd.js: identity=11529 gzip=4656 brotli=4257 bytes
onDemand chunk-1hn168n2.js: identity=2462 gzip=1109 brotli=935 bytes
critical chunk-cc2chr3c.js: identity=17627 gzip=6245 brotli=5566 bytes
onDemand chunk-dj88c5nr.js: identity=1616 gzip=864 brotli=737 bytes
onDemand chunk-ac125z5n.js: identity=51051 gzip=15945 brotli=14187 bytes
onDemand chunk-p34rqwxp.js: identity=1063 gzip=651 brotli=518 bytes
critical chunk-hsvc2xj7.js: identity=2519 gzip=1007 brotli=878 bytes
onDemand chunk-nfsjyeyd.js: identity=6265 gzip=2104 brotli=1864 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=492 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=159 bytes
onDemand chunk-nj9dpjve.js: identity=4575 gzip=2014 brotli=1800 bytes
onDemand chunk-pdzjp0te.js: identity=14531 gzip=5413 brotli=4850 bytes
critical chunk-64xwg9x5.js: identity=16027 gzip=6221 brotli=5542 bytes
critical chunk-8wn2fegk.js: identity=199 gzip=160 brotli=136 bytes
onDemand chunk-vmkf0ye4.js: identity=3891 gzip=1737 brotli=1494 bytes
onDemand chunk-rndw0grg.js: identity=1026 gzip=624 brotli=498 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-3y5a3ksx.js: identity=31924 gzip=12267 brotli=11046 bytes
deferred chunk-sjr84a7q.js: identity=43046 gzip=16606 brotli=14645 bytes
critical chunk-bbjhz7vm.js: identity=162 gzip=150 brotli=128 bytes
onDemand chunk-w4z2w8cn.js: identity=6772 gzip=3179 brotli=2893 bytes
deferred chunk-ppq71z31.js: identity=97785 gzip=33344 brotli=29457 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-7n9ytkxe.js: identity=7662 gzip=3396 brotli=2971 bytes
critical chunk-3st0hg2d.js: identity=5443 gzip=2606 brotli=2385 bytes
onDemand chunk-thzvmxda.js: identity=1170 gzip=708 brotli=620 bytes
onDemand chunk-4myrwgrb.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-ytpxqt0e.js: identity=2108 gzip=1037 brotli=870 bytes
onDemand chunk-mrdwpq35.js: identity=10693 gzip=4124 brotli=3762 bytes
critical chunk-9j95sedx.js: identity=707 gzip=367 brotli=306 bytes
onDemand chunk-0n8q01qb.js: identity=2824 gzip=1387 brotli=1198 bytes
onDemand chunk-0646ejav.js: identity=4640 gzip=1931 brotli=1708 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
critical chunk-p938y84p.js: identity=8377 gzip=3575 brotli=3188 bytes
critical chunk-w6s1ygar.js: identity=9810 gzip=4018 brotli=3453 bytes
critical chunk-45e8w4af.js: identity=21235 gzip=6856 brotli=6137 bytes
critical chunk-1y0k7gwq.js: identity=4499 gzip=1858 brotli=1633 bytes
onDemand chunk-t3tsjhs1.js: identity=6195 gzip=2793 brotli=2520 bytes
onDemand chunk-4dh812dh.js: identity=6357 gzip=2371 brotli=2110 bytes
onDemand chunk-am68jddx.js: identity=1649 gzip=775 brotli=675 bytes
onDemand chunk-cgsn1ga9.js: identity=2420 gzip=1200 brotli=1079 bytes
onDemand chunk-5aqtvhsp.js: identity=5359 gzip=2581 brotli=2293 bytes
onDemand chunk-fdxcmr71.js: identity=540 gzip=354 brotli=319 bytes
deferred chunk-gff23rqs.js: identity=1541 gzip=792 brotli=715 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=111760 gzip=40616 brotli=35233 bytes
onDemand chunk-1f4exzmv.js: identity=228 gzip=179 brotli=166 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-gtp0zmcg.js: identity=707945 gzip=204706 brotli=166113 bytes
onDemand chunk-vk86kn85.js: identity=191 gzip=170 brotli=137 bytes
JavaScript transfer, critical: identity=952686 gzip=295327/307200 brotli=245895/256000 bytes
JavaScript transfer, deferred: identity=142372 gzip=50742/51200 brotli=44817/45056 bytes
JavaScript transfer, onDemand: identity=191298 gzip=74749/20480 brotli=66516/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-ac125z5n.js: gzip=15945/20480 brotli=14187/18432 bytes (class total gzip=74749 brotli=66516, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Final scripts/verify fast transcript 7/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api) Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal) Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 6m 02s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/size-ratchet/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 22204304 bytes (max 22204304; allowance 0) key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Command State ready Detail Key memory initialization=1; locked pages and dump exclusion enabled Next Run this check under an 8 MiB memlock limit. Compiling cfg-if v1.0.5 Compiling pin-project-lite v0.2.17 Compiling bytes v1.12.1 Compiling libc v0.2.190 Compiling serde_core v1.0.229 Compiling once_cell v1.21.4 Compiling memchr v2.8.3 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling subtle v2.6.1 Compiling slab v0.4.12 Compiling tracing-core v0.1.36 Compiling typenum v1.20.1 Compiling writeable v0.6.4 Compiling yoke v0.8.3 Compiling litemap v0.8.3 Compiling utf8_iter v1.0.4 Compiling num-traits v0.2.19 Compiling percent-encoding v2.3.2 Compiling equivalent v1.0.2 Compiling icu_properties_data v2.3.0 Compiling tracing v0.1.44 Compiling serde v1.0.229 Compiling icu_normalizer_data v2.3.0 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling form_urlencoded v1.2.2 Compiling hashbrown v0.17.1 Compiling generic-array v0.14.7 Compiling thiserror v2.0.21 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling mio v1.2.4 Compiling cpufeatures v0.2.17 Compiling futures-util v0.3.34 Compiling scopeguard v1.2.0 Compiling zmij v1.0.23 Compiling openssl-sys v0.9.117 Compiling futures-channel v0.3.34 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling signal-hook-registry v1.4.8 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling indexmap v2.14.2 Compiling lock_api v0.4.14 Compiling parking_lot_core v0.9.12 Compiling serde_json v1.0.151 Compiling icu_locale_core v2.3.0 Compiling icu_collections v2.3.0 Compiling tokio v1.53.2 Compiling foldhash v0.1.5 Compiling bitflags v2.13.2 Compiling allocator-api2 v0.2.21 Compiling digest v0.10.7 Compiling rand_core v0.10.1 Compiling parking_lot v0.12.5 Compiling crossbeam-utils v0.8.23 Compiling either v1.18.0 Compiling ryu v1.0.23 Compiling hashbrown v0.15.5 Compiling parking v2.2.1 Compiling icu_provider v2.3.1 Compiling base64 v0.22.1 Compiling crc-catalog v2.5.0 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling event-listener v5.4.2 Compiling serde_urlencoded v0.7.1 Compiling crc v3.4.0 Compiling sha2 v0.10.9 Compiling zerocopy v0.8.60 Compiling hashlink v0.10.0 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling spin v0.9.9 Compiling getrandom v0.2.17 Compiling libsqlite3-sys v0.30.1 Compiling futures-executor v0.3.34 Compiling getrandom v0.4.3 Compiling atoi v2.0.0 Compiling foreign-types-shared v0.1.1 Compiling http v1.5.0 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-plugin-api) Compiling zeroize v1.9.0 Compiling flume v0.11.1 Compiling foreign-types v0.3.2 Compiling ring v0.17.14 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling idna_adapter v1.2.2 Compiling tokio-stream v0.1.19 Compiling arrayvec v0.7.8 Compiling minimal-lexical v0.2.1 Compiling uuid v1.27.0 Compiling idna v1.1.0 Compiling nix v0.30.1 Compiling rand_core v0.9.5 Compiling powerfmt v0.2.1 Compiling nom v7.1.3 Compiling untrusted v0.9.0 Compiling http-body v1.1.0 Compiling num-conv v0.2.2 Compiling url v2.5.8 Compiling time-core v0.1.9 Compiling deranged v0.5.8 Compiling thiserror v1.0.69 Compiling httparse v1.10.1 Compiling tokio-util v0.7.19 Compiling rustls-pki-types v1.15.1 Compiling sqlx-core v0.8.6 Compiling rusticata-macros v4.1.0 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling tinyvec v1.13.3 Compiling rand_core v0.6.4 Compiling chacha20 v0.10.2 Compiling num-integer v0.1.47 Compiling ppv-lite86 v0.2.21 Compiling time v0.3.55 Compiling base64 v0.21.7 Compiling try-lock v0.2.5 Compiling lazy_static v1.5.1 Compiling httpdate v1.0.3 Compiling atomic-waker v1.1.2 Compiling fnv v1.0.7 Compiling sqlx-sqlite v0.8.6 Compiling want v0.3.2 Compiling rand_chacha v0.9.0 Compiling base64urlsafedata v0.5.5 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-shim) Compiling rand v0.10.3 Compiling num-bigint v0.4.8 Compiling h2 v0.4.19 Compiling vte v0.15.0 Compiling rand_pcg v0.10.2 Compiling rand v0.9.5 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-protocol) Compiling rustc-hash v2.1.3 Compiling tower-layer v0.3.3 Compiling sqlx v0.8.6 Compiling asn1-rs v0.6.2 Compiling mime v0.3.17 Compiling lru-slab v0.1.3 Compiling quinn-udp v0.5.16 Compiling half v2.7.1 Compiling http-body-util v0.1.5 Compiling sha1 v0.10.7 Compiling utf8parse v0.2.2 Compiling regex-syntax v0.8.11 Compiling oid-registry v0.7.1 Compiling der-parser v9.0.0 Compiling sync_wrapper v1.0.2 Compiling serde_cbor_2 v0.13.0 Compiling tungstenite v0.29.0 Compiling anstyle-parse v1.0.0 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-mesh) Compiling hyper v1.11.1 Compiling regex-automata v0.4.18 Compiling webauthn-rs-proto v0.5.5 Compiling x509-parser v0.16.0 Compiling rand_chacha v0.3.1 Compiling rustls v0.23.45 Compiling hex-conservative v0.2.3 Compiling is_terminal_polyfill v1.70.2 Compiling anstyle v1.0.14 Compiling hex v0.4.3 Compiling unicase v2.10.0 Compiling anstyle-query v1.1.5 Compiling colorchoice v1.0.5 Compiling base64ct v1.8.3 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling hyper-util v0.1.21 Compiling tokio-tungstenite v0.29.0 Compiling arc-swap v1.9.2 Compiling mime_guess v2.0.5 Compiling anstream v1.0.0 Compiling fs-err v3.3.2 Compiling password-hash v0.5.0 Compiling rustls-webpki v0.103.15 Compiling matchers v0.2.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/host-facts) Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling strsim v0.11.1 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling clap_lex v1.1.1 Compiling http-range-header v0.4.2 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-server) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/release) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/backup) Compiling tower-http v0.6.11 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling clap_builder v4.6.7 Compiling quinn-proto v0.11.19 Compiling clap v4.6.7 Compiling quinn v0.11.12 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/remote) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/plugins/ssh) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/size-ratchet/crates/infraternal-agent) Compiling webauthn-rs v0.5.5 Finished `release` profile [optimized] target(s) in 4m 13s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/size-ratchet/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19638744 bytes (max 19638744; allowance 0) key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 22204304-byte cap PASS; 22204305 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19638744-byte cap PASS; 19638745 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS server subcommand: exit 2, versioned JSON unavailable result agent subcommand: exit 2, versioned JSON unavailable result +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [413.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [27.44ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [19.24ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.94ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.08ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.23ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.18ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.10ms] (pass) FrameDetector > fps, p95 and window read the ring [0.19ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.24ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.24ms] (pass) repeating the front item changes nothing [0.07ms] (pass) the list is capped, so the oldest items fall off [0.06ms] (pass) top skips items that are no longer live, without losing them [0.08ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.15ms] (pass) recentRows: a view with three windows and no use shows them in order [0.03ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.42ms] (pass) routine connection states stay out of the toast [0.05ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.35ms] (pass) a deferred new:below selection retains its original window [0.03ms] (pass) a deferred close selection retains its original window [0.01ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.82ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.24ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.21ms] (pass) extended info on: every fact sits under System, Resources or Access [0.18ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.14ms] (pass) before facts arrive the host's platform names the header [0.06ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.07ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.57ms] (pass) without `access` (today's server) the person may view and may not edit [0.27ms] (pass) fields the server does not send are absent, never invented [0.23ms] (pass) anything that is not a list is refused, whole [4.95ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.20ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.25ms] (pass) answers carry the new revision, and a create the new arrow's id [0.12ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.12ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.99ms] (pass) the layout is deterministic and does not depend on input order [4.94ms] (pass) no two cards overlap, and every card lies inside the graph [6.98ms] (pass) the sheet is wider than tall, roughly 16:10 [1.63ms] (pass) a pinned node stays where it was put and the others do not move [2.59ms] (pass) a pin beyond the sheet grows the graph [0.43ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.26ms] (pass) 1,000 nodes lay out in a few milliseconds [8.25ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.50ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.19ms] (pass) a view taller than the viewport is scaled down so it fits [0.04ms] (pass) nearestStop picks the stop whose centre is closest [0.15ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.25ms] (pass) a small graph keeps one stop per node column [0.12ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.08ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.12ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.67ms] (pass) closing the new half gives the layout back exactly, in the model [1.42ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.53ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.34ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.58ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.52ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.20ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.25ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.12ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.14ms] (pass) random sequences of split right, split down, new window right and close never break the grid [60.92ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.52ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.16ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.59ms] (pass) a chain of neighbours is pushed in turn [0.11ms] (pass) snapping rounds to whole cells [0.05ms] (pass) reach follows grants through tags and keeps the relay [0.30ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.40ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.05ms] (pass) a desktop column is the same alone and in a strip [0.02ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.63ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.55ms] (pass) inventory remembers a remote session and refuses a cross-host attach [2.19ms] (pass) superseded status snapshots release records for sessions this device never opened [1.70ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.25ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.25ms] (pass) a final Close before the first positive census never revives a new ID [0.15ms] (pass) a later absence retires a new ID after its first positive census [0.17ms] (pass) another host's census cannot clear a new shell's census fence [0.13ms] (pass) another host's close cannot clear a new shell's census fence [0.03ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.42ms] (pass) a detected operating system supplies the live popover mark [1.21ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.13ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.27ms] (pass) unknown and ambiguous labels never open an embedded shell [0.07ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.12ms] (pass) an authoritative host snapshot replaces admission with one notification [0.45ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.30ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [1.17ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.23ms] (pass) a removal in another browser withdraws the host [0.22ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.32ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.45ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.59ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.34ms] (pass) a known retired status survives repeated selection and generic ended answers [0.20ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [16.38ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [13.01ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.00ms] (pass) legacy refusals still work and malformed counters never reach the message [0.39ms] (pass) product copy names the host and counters and never renders untrusted server text [0.84ms] (pass) oversized refusal JSON is ignored before parsing [0.11ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.52ms] (pass) a document survives JSON and rebuilds the same columns [0.78ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms] (pass) parseDocument rejects anything that is not a document of this format [0.30ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.19ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.30ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.24ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.66ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.14ms] (pass) listed host plus port retains its saved user in the serialized destination [0.16ms] (pass) review listed inventory name plus port retains its resolved address [0.24ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.41ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.09ms] (pass) parsing the server's data > an install command needs a lifetime [0.08ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.44ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.29ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.75ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.35ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.22ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.39ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.64ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [4.35ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.31ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.24ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.17ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.17ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.10ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.11ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.11ms] (pass) authLabel > names the method and a trusted network provider only [0.04ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.11ms] (pass) guideFor > each failure kind names its fix [0.12ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.09ms] (pass) parseTarget > refuses what cannot name a host [0.04ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.69ms] (pass) parseSshConfig > recognises config text [0.10ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.10ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.14ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.67ms] (pass) only a completed canonical host identity becomes terminal authority [0.38ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.18ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.04ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.07ms] (pass) missing payload tells the operator the architecture and expected server path [0.05ms] (pass) an already added host says so and offers opening its existing terminal [0.03ms] (pass) release payload verification names the architecture step and plain reason [0.04ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.15ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.08ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.51ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.33ms] (pass) ready CA begins the requested installation mode without another prompt [0.09ms] (pass) closing during CA confirmation never starts an SSH attempt [0.28ms] (pass) a typed root login requires explicit consent before any installation [0.13ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [1.07ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.49ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.73ms] (pass) a chunk that both sides use stays critical [0.17ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.12ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.11ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [2.88ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.57ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.56ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [10.98ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [21.55ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [9.35ms] (pass) abandoned word acknowledgement uploads nothing [3.53ms] (pass) settled acknowledgement cannot upload later (dismissed) [3.52ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.08ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [2.22ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [1.63ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.68ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.57ms] (pass) malformed or excessive remaining wait -1 is denied [2.45ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.38ms] (pass) malformed or excessive remaining wait 172801 is denied [1.60ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.82ms] (pass) malformed or excessive remaining wait 90000 is denied [1.67ms] 191 pass 0 fail 11387 expect() calls Ran 191 tests across 31 files. [449.00ms] $ bun run build.ts built chunk-45e8w4af.js, chunk-sjr84a7q.js, chunk-1y0k7gwq.js, chunk-4dh812dh.js, chunk-vmkf0ye4.js, chunk-9j95sedx.js, chunk-gxvqf3b8.js, chunk-1f4exzmv.js, chunk-cgsn1ga9.js, chunk-vk86kn85.js, chunk-nfsjyeyd.js, chunk-ytpxqt0e.js, main.js, chunk-p938y84p.js, chunk-4myrwgrb.js, chunk-3st0hg2d.js, chunk-64xwg9x5.js, chunk-cc2chr3c.js, chunk-rgh1mqz4.js, chunk-hsvc2xj7.js, chunk-yr0r38s4.js, chunk-a52hbfka.js, chunk-gff23rqs.js, chunk-ppq71z31.js, chunk-mrdwpq35.js, chunk-rndw0grg.js, chunk-axbkkqp1.js, chunk-gtp0zmcg.js, chunk-t3tsjhs1.js, chunk-0n8q01qb.js, chunk-nj9dpjve.js, chunk-dj88c5nr.js, chunk-thzvmxda.js, chunk-am68jddx.js, chunk-fdxcmr71.js, chunk-rbr0gsfd.js, chunk-5aqtvhsp.js, chunk-0646ejav.js, chunk-7n9ytkxe.js, chunk-pdzjp0te.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-ac125z5n.js, chunk-bbjhz7vm.js, chunk-w4z2w8cn.js, chunk-3y5a3ksx.js, chunk-1hn168n2.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-w6s1ygar.js, chunk-f2r0hhqc.js, chunk-p34rqwxp.js, chunk-8wn2fegk.js, chunk-8rc2cx0f.js critical chunk-rgh1mqz4.js: identity=590 gzip=327 brotli=301 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes critical chunk-a52hbfka.js: identity=1104 gzip=666 brotli=605 bytes critical chunk-8rc2cx0f.js: identity=42534 gzip=14525 brotli=13052 bytes onDemand chunk-rbr0gsfd.js: identity=11529 gzip=4656 brotli=4257 bytes onDemand chunk-1hn168n2.js: identity=2462 gzip=1109 brotli=935 bytes critical chunk-cc2chr3c.js: identity=17627 gzip=6245 brotli=5566 bytes onDemand chunk-dj88c5nr.js: identity=1616 gzip=864 brotli=737 bytes onDemand chunk-ac125z5n.js: identity=51051 gzip=15945 brotli=14187 bytes onDemand chunk-p34rqwxp.js: identity=1063 gzip=651 brotli=518 bytes critical chunk-hsvc2xj7.js: identity=2519 gzip=1007 brotli=878 bytes onDemand chunk-nfsjyeyd.js: identity=6265 gzip=2104 brotli=1864 bytes critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=492 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=159 bytes onDemand chunk-nj9dpjve.js: identity=4575 gzip=2014 brotli=1800 bytes onDemand chunk-pdzjp0te.js: identity=14531 gzip=5413 brotli=4850 bytes critical chunk-64xwg9x5.js: identity=16027 gzip=6221 brotli=5542 bytes critical chunk-8wn2fegk.js: identity=199 gzip=160 brotli=136 bytes onDemand chunk-vmkf0ye4.js: identity=3891 gzip=1737 brotli=1494 bytes onDemand chunk-rndw0grg.js: identity=1026 gzip=624 brotli=498 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-3y5a3ksx.js: identity=31924 gzip=12267 brotli=11046 bytes deferred chunk-sjr84a7q.js: identity=43046 gzip=16606 brotli=14645 bytes critical chunk-bbjhz7vm.js: identity=162 gzip=150 brotli=128 bytes onDemand chunk-w4z2w8cn.js: identity=6772 gzip=3179 brotli=2893 bytes deferred chunk-ppq71z31.js: identity=97785 gzip=33344 brotli=29457 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-7n9ytkxe.js: identity=7662 gzip=3396 brotli=2971 bytes critical chunk-3st0hg2d.js: identity=5443 gzip=2606 brotli=2385 bytes onDemand chunk-thzvmxda.js: identity=1170 gzip=708 brotli=620 bytes onDemand chunk-4myrwgrb.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-ytpxqt0e.js: identity=2108 gzip=1037 brotli=870 bytes onDemand chunk-mrdwpq35.js: identity=10693 gzip=4124 brotli=3762 bytes critical chunk-9j95sedx.js: identity=707 gzip=367 brotli=306 bytes onDemand chunk-0n8q01qb.js: identity=2824 gzip=1387 brotli=1198 bytes onDemand chunk-0646ejav.js: identity=4640 gzip=1931 brotli=1708 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes critical chunk-p938y84p.js: identity=8377 gzip=3575 brotli=3188 bytes critical chunk-w6s1ygar.js: identity=9810 gzip=4018 brotli=3453 bytes critical chunk-45e8w4af.js: identity=21235 gzip=6856 brotli=6137 bytes critical chunk-1y0k7gwq.js: identity=4499 gzip=1858 brotli=1633 bytes onDemand chunk-t3tsjhs1.js: identity=6195 gzip=2793 brotli=2520 bytes onDemand chunk-4dh812dh.js: identity=6357 gzip=2371 brotli=2110 bytes onDemand chunk-am68jddx.js: identity=1649 gzip=775 brotli=675 bytes onDemand chunk-cgsn1ga9.js: identity=2420 gzip=1200 brotli=1079 bytes onDemand chunk-5aqtvhsp.js: identity=5359 gzip=2581 brotli=2293 bytes onDemand chunk-fdxcmr71.js: identity=540 gzip=354 brotli=319 bytes deferred chunk-gff23rqs.js: identity=1541 gzip=792 brotli=715 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=111760 gzip=40616 brotli=35233 bytes onDemand chunk-1f4exzmv.js: identity=228 gzip=179 brotli=166 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes critical chunk-gtp0zmcg.js: identity=707945 gzip=204706 brotli=166113 bytes onDemand chunk-vk86kn85.js: identity=191 gzip=170 brotli=137 bytes JavaScript transfer, critical: identity=952686 gzip=295327/307200 brotli=245895/256000 bytes JavaScript transfer, deferred: identity=142372 gzip=50742/51200 brotli=44817/45056 bytes JavaScript transfer, onDemand: identity=191298 gzip=74749/20480 brotli=66516/18432 bytes JavaScript transfer, onDemand largest chunk chunk-ac125z5n.js: gzip=15945/20480 brotli=14187/18432 bytes (class total gzip=74749 brotli=66516, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes ```
kayg commented 2026-10-13 11:00:46 +00:00
Author
Owner
Copy link

Final scripts/verify fast transcript 8/8; head 88e8a0dad8.

Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.37ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.44ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.16ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.18ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.21ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.09ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.48ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.28ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.25ms]
(pass) split mux header preserves trailing Close [0.27ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.20ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.20ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.92ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.47ms]
(pass) superseded failure preserves a newer pending refresh [2.92ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3465.12ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [13.86ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [4.84ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [6.39ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.31ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.38ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.85ms]
(pass) review continuation stops after forbidden [1.56ms]
(pass) review continuation stops after superseded [1.27ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.48ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.27ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.25ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.04ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [1.61ms]
(pass) watch never publishes a partial page; withdrawn=true [1.24ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.68ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.22ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.57ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.60ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.65ms]

 37 pass
 0 fail
 34463 expect() calls
Ran 37 tests across 10 files. [3.57s]
Final scripts/verify fast transcript 8/8; head 88e8a0dad8f865d004986e794ea82bba498959ea. ```text Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.37ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.44ms] (pass) subscription not found ends delivery before a late refresh rejection [1.16ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.18ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms] (pass) synchronous subscription refusal releases the transport exactly once [0.21ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.09ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.48ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.28ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.25ms] (pass) split mux header preserves trailing Close [0.27ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.20ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.20ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.92ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.47ms] (pass) superseded failure preserves a newer pending refresh [2.92ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3465.12ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [13.86ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [4.84ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [6.39ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.31ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.38ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.85ms] (pass) review continuation stops after forbidden [1.56ms] (pass) review continuation stops after superseded [1.27ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.48ms] (pass) a changed revision discards earlier pages before assembling its restart [0.27ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.25ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.04ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [1.61ms] (pass) watch never publishes a partial page; withdrawn=true [1.24ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.68ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.22ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.57ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.60ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.65ms] 37 pass 0 fail 34463 expect() calls Ran 37 tests across 10 files. [3.57s] ```
kayg commented 2026-10-13 11:04:21 +00:00
Author
Owner
Copy link

Independent review started on review-size-ratchet at target 88e8a0dad8. Requested local dev merge base: 8e7467c07c; recorded implementation base: 85368c7fdd. Read all 31 #198 comments and report; no parent issue is named. Reviewing the full requested range with #198 changes isolated. Fresh private build target; no push/deploy/perf VM use. Timing claims can only be assessed from retained evidence under this review brief.

Independent review started on review-size-ratchet at target 88e8a0dad8f865d004986e794ea82bba498959ea. Requested local dev merge base: 8e7467c07cd2ec1668a775a846076b278f68ef38; recorded implementation base: 85368c7fdda186fa46b142be4d0546807357247a. Read all 31 #198 comments and report; no parent issue is named. Reviewing the full requested range with #198 changes isolated. Fresh private build target; no push/deploy/perf VM use. Timing claims can only be assessed from retained evidence under this review brief.
kayg commented 2026-10-13 11:08:27 +00:00
Author
Owner
Copy link

Independent verification step: origin/dev is dcf9dbb9 and its merge base with 88e8a0da is 85368c7f (the local dev branch is stale). Review isolates 24 changed paths / eight #198 commits. An isolated Rust harness compares base and target public metadata over 1,025 cases: empty/large/lazy iterators, duplicate properties, required order, Unicode/control descriptions, nested arrays and action defaults. All serialized bytes agree. No dependency/feature/contract changes in this range. Raw retained CLI p50/p95 and credited-flood arithmetic agree with the report; runtime probes are single-session, not scale acceptance. Fresh scripts/verify fast is still building; no confirmed finding.

Independent verification step: origin/dev is dcf9dbb9 and its merge base with 88e8a0da is 85368c7f (the local dev branch is stale). Review isolates 24 changed paths / eight #198 commits. An isolated Rust harness compares base and target public metadata over 1,025 cases: empty/large/lazy iterators, duplicate properties, required order, Unicode/control descriptions, nested arrays and action defaults. All serialized bytes agree. No dependency/feature/contract changes in this range. Raw retained CLI p50/p95 and credited-flood arithmetic agree with the report; runtime probes are single-session, not scale acceptance. Fresh scripts/verify fast is still building; no confirmed finding.
kayg commented 2026-10-13 11:34:04 +00:00
Author
Owner
Copy link

Independent evidence step committed locally: c2e729b017 on review-size-ratchet. Added docs/verification/size-ratchet-review/verify-metadata.py and metadata-differential.rs; 1,025 direct-Git base/target serialized-action comparisons pass, including constructor edge cases. Rust formatting, Python syntax and diff checks pass. No implementation changed and no push. Original-source scripts/verify fast has passed fmt, native fmt, compile-out, clippy, all 1,020 Rust tests and cargo-deny; both static builds remain in progress. No confirmed findings.

Independent evidence step committed locally: c2e729b017082d956225bb8077f55c66fb6ca069 on review-size-ratchet. Added docs/verification/size-ratchet-review/verify-metadata.py and metadata-differential.rs; 1,025 direct-Git base/target serialized-action comparisons pass, including constructor edge cases. Rust formatting, Python syntax and diff checks pass. No implementation changed and no push. Original-source scripts/verify fast has passed fmt, native fmt, compile-out, clippy, all 1,020 Rust tests and cargo-deny; both static builds remain in progress. No confirmed findings.
kayg commented 2026-10-13 11:49:35 +00:00
Author
Owner
Copy link

Independent x86_64 shipping verification at review c2e729b0 / implementation 88e8a0da: fresh stripped static image is exactly 22,204,304 B; trust/linkage and locked key heap pass. Fresh native archive retains the same 182 public symbols. Public skill index has 54 actions and SHA-256 b8566728561e06f412ba4a2b4aced345b5f2239e0a688284c7e98e7b36cb009e, matching retained evidence. Functional tests on this shipping artifact pass: 24 abrupt-stop/restart cases, 4,710,396 payload bytes replayed exactly; four 12-MiB snapshot-credit floods with three 1-byte-credit pauses/funded snapshots and ring-wrap recovery. No runtime timing measurement. aarch64 and full gate still running; no confirmed findings.

Independent x86_64 shipping verification at review c2e729b0 / implementation 88e8a0da: fresh stripped static image is exactly 22,204,304 B; trust/linkage and locked key heap pass. Fresh native archive retains the same 182 public symbols. Public skill index has 54 actions and SHA-256 b8566728561e06f412ba4a2b4aced345b5f2239e0a688284c7e98e7b36cb009e, matching retained evidence. Functional tests on this shipping artifact pass: 24 abrupt-stop/restart cases, 4,710,396 payload bytes replayed exactly; four 12-MiB snapshot-credit floods with three 1-byte-credit pauses/funded snapshots and ring-wrap recovery. No runtime timing measurement. aarch64 and full gate still running; no confirmed findings.
kayg commented 2026-10-13 11:57:03 +00:00
Author
Owner
Copy link

Independent original-source scripts/verify fast finished with exit 0. Implementation 88e8a0da; review c2e729b0 adds only the proof harness. Both fresh exact caps reproduced: x86_64 22,204,304 B / aarch64 19,638,744 B. Both native archives retain 182 public symbols. All 1,020 Rust tests and all final TypeScript checks pass; no baseline retry or waiver. ARM key-memory runtime is correctly marked untested on this x86 host. Full stdout/stderr will be retained verbatim with the final review report; SHA-256 ca6727ff60d0f9e9b9b930e55aba2764b71a293ada1f2464522352c1e1d8aa99, 338416 bytes. Private original-base/first-cut replay is now running to independently verify per-cut savings. No confirmed findings.

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
Independent original-source scripts/verify fast finished with exit 0. Implementation 88e8a0da; review c2e729b0 adds only the proof harness. Both fresh exact caps reproduced: x86_64 22,204,304 B / aarch64 19,638,744 B. Both native archives retain 182 public symbols. All 1,020 Rust tests and all final TypeScript checks pass; no baseline retry or waiver. ARM key-memory runtime is correctly marked untested on this x86 host. Full stdout/stderr will be retained verbatim with the final review report; SHA-256 ca6727ff60d0f9e9b9b930e55aba2764b71a293ada1f2464522352c1e1d8aa99, 338416 bytes. Private original-base/first-cut replay is now running to independently verify per-cut savings. No confirmed findings. ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ```
kayg commented 2026-10-13 11:59:03 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 1/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.


==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 3.568s

OK
.
----------------------------------------------------------------------
Ran 1 test in 1.799s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [1124.38ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [3647.31ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [2403.81ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [7.47s]
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=319.65 p99_ms=345.42 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.26
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling syn v3.0.6
   Compiling serde_core v1.0.229
   Compiling memchr v2.8.3
   Compiling autocfg v1.5.1
   Compiling memoffset v0.9.1
   Compiling utf8parse v0.2.2
   Compiling zmij v1.0.23
   Compiling cfg-if v1.0.5
   Compiling cfg_aliases v0.2.2
   Compiling nix v0.30.1
   Compiling anstyle-parse v1.0.0
   Compiling anstyle-query v1.1.5
   Compiling serde_json v1.0.151
   Compiling anstyle v1.0.14
   Compiling arrayvec v0.7.8
   Compiling itoa v1.0.18
   Compiling getrandom v0.4.3
   Compiling serde v1.0.229
   Compiling is_terminal_polyfill v1.70.2
   Compiling colorchoice v1.0.5
   Compiling vte v0.15.0
   Compiling anstream v1.0.0
   Compiling serde_derive v1.0.229
   Compiling errno v0.3.14
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api)
   Compiling thiserror v2.0.21
   Compiling heck v0.5.0
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim)
   Compiling strsim v0.11.1
   Compiling clap_lex v1.1.1
   Compiling bitflags v2.13.2
   Compiling clap_builder v4.6.7
   Compiling clap_derive v4.6.7
   Compiling signal-hook-registry v1.4.8
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling socket2 v0.6.5
   Compiling mio v1.2.4
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal)
   Compiling unicode-width v0.2.2
   Compiling bytes v1.12.1
   Compiling pin-project-lite v0.2.17
   Compiling tokio v1.53.2
   Compiling vt100 v0.16.2
   Compiling uuid v1.27.0
   Compiling clap v4.6.7
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 00s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal-d0028d263474a180)

running 25 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s


==> clippy
   Compiling syn v3.0.6
    Checking libc v0.2.190
    Checking cfg-if v1.0.5
   Compiling syn v2.0.119
   Compiling jobserver v0.1.35
   Compiling shlex v2.0.1
   Compiling serde v1.0.229
   Compiling find-msvc-tools v0.1.14
   Compiling serde_derive v1.0.229
   Compiling cc v1.6.0
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
   Compiling serde_core v1.0.229
   Compiling yoke-derive v0.8.4
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
   Compiling displaydoc v0.2.7
    Checking memchr v2.8.3
   Compiling zerovec-derive v0.11.6
    Checking getrandom v0.2.17
    Checking pin-project-lite v0.2.17
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
    Checking itoa v1.0.18
    Checking rand_core v0.6.4
    Checking typenum v1.20.1
   Compiling tracing-attributes v0.1.31
    Checking bytes v1.12.1
    Checking once_cell v1.21.4
    Checking crypto-common v0.1.7
    Checking log v0.4.34
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
    Checking subtle v2.6.1
    Checking tracing-core v0.1.36
    Checking futures-core v0.3.34
    Checking zerofrom v0.1.8
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
   Compiling num-traits v0.2.19
    Checking socket2 v0.6.5
    Checking errno v0.3.14
    Checking smallvec v1.16.2
    Checking signal-hook-registry v1.4.8
    Checking tracing v0.1.44
   Compiling tokio-macros v2.7.2
    Checking mio v1.2.4
    Checking tokio v1.53.2
    Checking zerovec v0.11.8
    Checking futures-sink v0.3.34
    Checking slab v0.4.12
   Compiling thiserror-impl v2.0.21
   Compiling parking_lot_core v0.9.12
   Compiling crossbeam-utils v0.8.23
    Checking tinystr v0.8.4
    Checking block-buffer v0.10.4
    Checking cpufeatures v0.2.17
    Checking writeable v0.6.4
    Checking litemap v0.8.3
    Checking digest v0.10.7
    Checking icu_locale_core v2.3.0
    Checking potential_utf v0.1.6
    Checking zerotrie v0.2.5
   Compiling serde_json v1.0.151
    Checking utf8_iter v1.0.4
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
    Checking zmij v1.0.23
    Checking either v1.18.0
    Checking percent-encoding v2.3.2
    Checking equivalent v1.0.2
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
    Checking icu_properties v2.3.0
    Checking icu_normalizer v2.3.0
    Checking form_urlencoded v1.2.2
   Compiling futures-macro v0.3.34
    Checking hashbrown v0.17.1
    Checking futures-io v0.3.34
    Checking futures-task v0.3.34
    Checking indexmap v2.14.2
    Checking futures-util v0.3.34
    Checking idna_adapter v1.2.2
    Checking thiserror v2.0.21
   Compiling libsqlite3-sys v0.30.1
    Checking idna v1.1.0
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling hashbrown v0.15.5
   Compiling parking_lot v0.12.5
    Checking url v2.5.8
    Checking futures-channel v0.3.34
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
    Checking bitflags v2.13.2
   Compiling sha2 v0.10.9
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling crossbeam-queue v0.3.14
   Compiling tokio-stream v0.1.19
   Compiling futures-intrusive v0.5.0
   Compiling hashlink v0.10.0
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling base64 v0.22.1
   Compiling sqlx-core v0.8.6
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling sqlx-sqlite v0.8.6
   Compiling dotenvy v0.15.7
   Compiling hex v0.4.3
   Compiling sqlx-macros-core v0.8.6
   Compiling sqlx-macros v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
    Checking memoffset v0.9.1
   Compiling openssl-src v300.6.1+3.6.3
    Checking sqlx v0.8.6
   Compiling openssl-sys v0.9.117
    Checking rand_core v0.10.1
   Compiling openssl v0.10.81
    Checking foreign-types-shared v0.1.1
   Compiling getrandom v0.4.3
    Checking foreign-types v0.3.2
   Compiling openssl-macros v0.1.1
    Checking uuid v1.27.0
    Checking zeroize v1.9.0
    Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol)
    Checking arrayvec v0.7.8
    Checking vte v0.15.0
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim)
    Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh)
   Compiling zerocopy v0.8.60
   Compiling zerocopy-derive v0.8.60
   Compiling ring v0.17.14
    Checking http v1.5.0
    Checking ppv-lite86 v0.2.21
    Checking untrusted v0.9.0
   Compiling getrandom v0.3.4
    Checking half v2.7.1
    Checking rustls-pki-types v1.15.1
   Compiling rustls v0.23.45
    Checking tinyvec v1.13.3
    Checking cpufeatures v0.3.1
    Checking chacha20 v0.10.2
    Checking rustls-webpki v0.103.15
   Compiling quinn-udp v0.5.16
    Checking minimal-lexical v0.2.1
   Compiling thiserror v1.0.69
   Compiling httparse v1.10.1
    Checking regex-syntax v0.8.11
   Compiling num-conv v0.2.2
   Compiling time-core v0.1.9
   Compiling tokio-openssl v0.6.5
   Compiling time-macros v0.2.32
    Checking regex-automata v0.4.18
    Checking nom v7.1.3
    Checking rand_core v0.9.5
    Checking rand v0.10.3
    Checking http-body v1.1.0
    Checking rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
    Checking deranged v0.5.8
    Checking lru-slab v0.1.3
    Checking rustc-hash v2.1.3
    Checking powerfmt v0.2.1
    Checking time v0.3.55
    Checking quinn-proto v0.11.19
   Compiling asn1-rs-derive v0.5.1
    Checking rand_chacha v0.9.0
    Checking rusticata-macros v4.1.0
    Checking tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
    Checking data-encoding v2.11.1
    Checking tower-service v0.3.3
    Checking asn1-rs v0.6.2
    Checking rand v0.9.5
    Checking num-integer v0.1.47
    Checking base64 v0.21.7
    Checking lazy_static v1.5.1
   Compiling pastey v0.1.1
    Checking fnv v1.0.7
    Checking atomic-waker v1.1.2
    Checking httpdate v1.0.3
    Checking try-lock v0.2.5
   Compiling oid-registry v0.7.1
    Checking want v0.3.2
    Checking h2 v0.4.19
    Checking base64urlsafedata v0.5.5
    Checking num-bigint v0.4.8
    Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts)
    Checking tower-layer v0.3.3
   Compiling webauthn-attestation-ca v0.5.5
   Compiling unicase v2.10.0
    Checking mime v0.3.17
   Compiling rustversion v1.0.23
   Compiling mime_guess v2.0.5
    Checking der-parser v9.0.0
    Checking hyper v1.11.1
    Checking http-body-util v0.1.5
    Checking sha1 v0.10.7
   Compiling fs-err v3.3.2
    Checking sync_wrapper v1.0.2
   Compiling webauthn-rs-core v0.5.5
    Checking tungstenite v0.29.0
    Checking x509-parser v0.16.0
    Checking hyper-util v0.1.21
    Checking webauthn-rs-proto v0.5.5
    Checking serde_cbor_2 v0.13.0
    Checking rand_chacha v0.3.1
    Checking hex-conservative v0.2.3
    Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release)
    Checking base64ct v1.8.3
    Checking password-hash v0.5.0
    Checking bitcoin_hashes v0.14.101
    Checking rand v0.8.8
    Checking arc-swap v1.9.2
    Checking tokio-tungstenite v0.29.0
    Checking axum-core v0.5.6
    Checking tower v0.5.3
    Checking sharded-slab v0.1.7
    Checking matchers v0.2.0
    Checking unicode-normalization v0.1.25
    Checking blake2 v0.10.6
    Checking tracing-serde v0.2.0
    Checking tracing-log v0.2.0
    Checking serde_path_to_error v0.1.20
    Checking thread_local v1.1.10
    Checking matchit v0.8.4
    Checking nu-ansi-term v0.50.3
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server)
    Checking http-range-header v0.4.2
    Checking tower-http v0.6.11
    Checking tracing-subscriber v0.3.23
    Checking axum v0.8.9
    Checking argon2 v0.5.3
    Checking bip39 v2.2.2
   Compiling libfuzzer-sys v0.4.13
    Checking utf8parse v0.2.2
    Checking anstyle-parse v1.0.0
    Checking colorchoice v1.0.5
    Checking arbitrary v1.4.2
    Checking anstyle v1.0.14
    Checking anstyle-query v1.1.5
    Checking is_terminal_polyfill v1.70.2
    Checking anstream v1.0.0
    Checking strsim v0.11.1
    Checking clap_lex v1.1.1
    Checking clap_builder v4.6.7
   Compiling clap_derive v4.6.7
    Checking clap v4.6.7
    Checking inout v0.1.4
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal)
    Checking cipher v0.4.4
    Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup)
    Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay)
    Checking universal-hash v0.5.1
    Checking unicode-width v0.2.2
    Checking opaque-debug v0.3.1
    Checking polyval v0.6.2
    Checking vt100 v0.16.2
    Checking ghash v0.5.1
    Checking ctr v0.9.2
    Checking aes v0.8.4
    Checking hmac v0.12.1
    Checking aead v0.5.2
    Checking aes-gcm v0.10.3
    Checking hkdf v0.12.4
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling rayon-core v1.13.0
    Checking plotters-backend v0.3.7
    Checking ciborium-io v0.2.2
    Checking ciborium-ll v0.2.2
    Checking plotters-svg v0.3.7
    Checking itertools v0.13.0
    Checking same-file v1.0.6
    Checking cast v0.3.0
    Checking criterion-plot v0.6.0
    Checking walkdir v2.5.0
    Checking rayon v1.12.0
    Checking plotters v0.3.7
    Checking ciborium v0.2.2
    Checking regex v1.13.1
    Checking tinytemplate v1.2.1
    Checking oorandom v11.1.5
    Checking anes v0.1.6
    Checking criterion v0.7.0
    Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh)
    Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent)
    Checking axum-server v0.8.0
    Checking webauthn-rs v0.5.5
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 7m 03s

==> test
   Compiling memchr v2.8.3
   Compiling serde_core v1.0.229
   Compiling getrandom v0.2.17
   Compiling typenum v1.20.1
   Compiling generic-array v0.14.7
   Compiling futures-core v0.3.34
   Compiling once_cell v1.21.4
   Compiling serde v1.0.229
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling rand_core v0.6.4
   Compiling zerovec v0.11.8
   Compiling crypto-common v0.1.7
   Compiling subtle v2.6.1
   Compiling writeable v0.6.4
   Compiling tinystr v0.8.4
   Compiling litemap v0.8.3
   Compiling log v0.4.34
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling tracing-core v0.1.36
   Compiling utf8_iter v1.0.4
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling block-buffer v0.10.4
   Compiling icu_normalizer_data v2.3.0
   Compiling smallvec v1.16.2
   Compiling cpufeatures v0.2.17
   Compiling icu_properties_data v2.3.0
   Compiling tracing v0.1.44
   Compiling percent-encoding v2.3.2
   Compiling tokio v1.53.2
   Compiling icu_properties v2.3.0
   Compiling num-traits v0.2.19
   Compiling futures-sink v0.3.34
   Compiling form_urlencoded v1.2.2
   Compiling equivalent v1.0.2
   Compiling scopeguard v1.2.0
   Compiling slab v0.4.12
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling lock_api v0.4.14
   Compiling hashbrown v0.17.1
   Compiling indexmap v2.14.2
   Compiling thiserror v2.0.21
   Compiling crossbeam-utils v0.8.23
   Compiling digest v0.10.7
   Compiling either v1.18.0
   Compiling serde_json v1.0.151
   Compiling icu_normalizer v2.3.0
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling hashbrown v0.15.5
   Compiling futures-util v0.3.34
   Compiling idna_adapter v1.2.2
   Compiling parking v2.2.1
   Compiling ryu v1.0.23
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling idna v1.1.0
   Compiling hashlink v0.10.0
   Compiling parking_lot_core v0.9.12
   Compiling spin v0.9.9
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling parking_lot v0.12.5
   Compiling url v2.5.8
   Compiling futures-channel v0.3.34
   Compiling crossbeam-queue v0.3.14
   Compiling tokio-stream v0.1.19
   Compiling futures-intrusive v0.5.0
   Compiling libsqlite3-sys v0.30.1
   Compiling sha2 v0.10.9
   Compiling hex v0.4.3
   Compiling atoi v2.0.0
   Compiling sqlx-core v0.8.6
   Compiling futures-executor v0.3.34
   Compiling flume v0.11.1
   Compiling serde_urlencoded v0.7.1
   Compiling base64 v0.22.1
   Compiling sqlx-sqlite v0.8.6
   Compiling sqlx-macros-core v0.8.6
   Compiling sqlx-macros v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
   Compiling sqlx v0.8.6
   Compiling rand_core v0.10.1
   Compiling foreign-types-shared v0.1.1
   Compiling openssl-sys v0.9.117
   Compiling foreign-types v0.3.2
   Compiling getrandom v0.4.3
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol)
   Compiling vte v0.15.0
   Compiling openssl v0.10.81
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim)
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh)
   Compiling zerocopy v0.8.60
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh)
   Compiling untrusted v0.9.0
   Compiling ring v0.17.14
   Compiling rustls-pki-types v1.15.1
   Compiling http v1.5.0
   Compiling tinyvec v1.13.3
   Compiling cpufeatures v0.3.1
   Compiling chacha20 v0.10.2
   Compiling rustls-webpki v0.103.15
   Compiling ppv-lite86 v0.2.21
   Compiling rand v0.10.3
   Compiling rustls v0.23.45
   Compiling half v2.7.1
   Compiling rand_pcg v0.10.2
   Compiling lru-slab v0.1.3
   Compiling rustc-hash v2.1.3
   Compiling quinn-udp v0.5.16
   Compiling getrandom v0.3.4
   Compiling tokio-openssl v0.6.5
   Compiling regex-syntax v0.8.11
   Compiling quinn-proto v0.11.19
   Compiling time-core v0.1.9
   Compiling num-conv v0.2.2
   Compiling minimal-lexical v0.2.1
   Compiling nom v7.1.3
   Compiling time-macros v0.2.32
   Compiling regex-automata v0.4.18
   Compiling quinn v0.11.12
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling thiserror v1.0.69
   Compiling time v0.3.55
   Compiling rand_chacha v0.9.0
   Compiling httparse v1.10.1
   Compiling rusticata-macros v4.1.0
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts)
   Compiling tokio-util v0.7.19
   Compiling data-encoding v2.11.1
   Compiling tower-service v0.3.3
   Compiling asn1-rs v0.6.2
   Compiling rand v0.9.5
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote)
   Compiling num-integer v0.1.47
   Compiling httpdate v1.0.3
   Compiling base64 v0.21.7
   Compiling try-lock v0.2.5
   Compiling atomic-waker v1.1.2
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling unicase v2.10.0
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling oid-registry v0.7.1
   Compiling http-body-util v0.1.5
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release)
   Compiling hyper v1.11.1
   Compiling sha1 v0.10.7
   Compiling sync_wrapper v1.0.2
   Compiling tungstenite v0.29.0
   Compiling hyper-util v0.1.21
   Compiling x509-parser v0.16.0
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent)
   Compiling serde_cbor_2 v0.13.0
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling webauthn-rs-core v0.5.5
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling fs-err v3.3.2
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling matchers v0.2.0
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-log v0.2.0
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling http-range-header v0.4.2
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server)
   Compiling tower-http v0.6.11
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling webauthn-rs v0.5.5
   Compiling axum-server v0.8.0
   Compiling clap v4.6.7
   Compiling inout v0.1.4
   Compiling cipher v0.4.4
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay)
   Compiling universal-hash v0.5.1
   Compiling opaque-debug v0.3.1
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal)
   Compiling polyval v0.6.2
   Compiling vt100 v0.16.2
   Compiling ghash v0.5.1
   Compiling ctr v0.9.2
   Compiling aes v0.8.4
   Compiling hmac v0.12.1
   Compiling aead v0.5.2
   Compiling aes-gcm v0.10.3
   Compiling hkdf v0.12.4
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling plotters-backend v0.3.7
   Compiling ciborium-io v0.2.2
   Compiling ciborium-ll v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling rayon-core v1.13.0
   Compiling itertools v0.13.0
   Compiling same-file v1.0.6
   Compiling cast v0.3.0
   Compiling criterion-plot v0.6.0
   Compiling walkdir v2.5.0
   Compiling rayon v1.12.0
   Compiling plotters v0.3.7
   Compiling ciborium v0.2.2
   Compiling regex v1.13.1
   Compiling tinytemplate v1.2.1
   Compiling anes v0.1.6
   Compiling oorandom v11.1.5
   Compiling criterion v0.7.0
    Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 04s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal-ff26c3ff78ebab6f)

running 77 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 26.72s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_daemon-655727f9f0cc0d46)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.37s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_queues-0db8eea61c377b38)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.66s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_review-30a33faa48ae32cc)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.47s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_sessions-8e431b0b38cea6e6)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/idle_canary-be7f97f2723a1f42)

running 1 test
Independent review scripts/verify fast transcript 1/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 3.568s OK . ---------------------------------------------------------------------- Ran 1 test in 1.799s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [1124.38ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [3647.31ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [2403.81ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [7.47s] METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=319.65 p99_ms=345.42 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling proc-macro2 v1.0.107 Compiling unicode-ident v1.0.26 Compiling quote v1.0.47 Compiling libc v0.2.190 Compiling syn v3.0.6 Compiling serde_core v1.0.229 Compiling memchr v2.8.3 Compiling autocfg v1.5.1 Compiling memoffset v0.9.1 Compiling utf8parse v0.2.2 Compiling zmij v1.0.23 Compiling cfg-if v1.0.5 Compiling cfg_aliases v0.2.2 Compiling nix v0.30.1 Compiling anstyle-parse v1.0.0 Compiling anstyle-query v1.1.5 Compiling serde_json v1.0.151 Compiling anstyle v1.0.14 Compiling arrayvec v0.7.8 Compiling itoa v1.0.18 Compiling getrandom v0.4.3 Compiling serde v1.0.229 Compiling is_terminal_polyfill v1.70.2 Compiling colorchoice v1.0.5 Compiling vte v0.15.0 Compiling anstream v1.0.0 Compiling serde_derive v1.0.229 Compiling errno v0.3.14 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api) Compiling thiserror v2.0.21 Compiling heck v0.5.0 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim) Compiling strsim v0.11.1 Compiling clap_lex v1.1.1 Compiling bitflags v2.13.2 Compiling clap_builder v4.6.7 Compiling clap_derive v4.6.7 Compiling signal-hook-registry v1.4.8 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling socket2 v0.6.5 Compiling mio v1.2.4 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal) Compiling unicode-width v0.2.2 Compiling bytes v1.12.1 Compiling pin-project-lite v0.2.17 Compiling tokio v1.53.2 Compiling vt100 v0.16.2 Compiling uuid v1.27.0 Compiling clap v4.6.7 Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 00s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal-d0028d263474a180) running 25 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s ==> clippy Compiling syn v3.0.6 Checking libc v0.2.190 Checking cfg-if v1.0.5 Compiling syn v2.0.119 Compiling jobserver v0.1.35 Compiling shlex v2.0.1 Compiling serde v1.0.229 Compiling find-msvc-tools v0.1.14 Compiling serde_derive v1.0.229 Compiling cc v1.6.0 Compiling synstructure v0.14.0 Compiling zerofrom-derive v0.1.8 Compiling serde_core v1.0.229 Compiling yoke-derive v0.8.4 Compiling version_check v0.9.5 Compiling generic-array v0.14.7 Compiling displaydoc v0.2.7 Checking memchr v2.8.3 Compiling zerovec-derive v0.11.6 Checking getrandom v0.2.17 Checking pin-project-lite v0.2.17 Compiling pkg-config v0.3.34 Compiling vcpkg v0.2.15 Checking itoa v1.0.18 Checking rand_core v0.6.4 Checking typenum v1.20.1 Compiling tracing-attributes v0.1.31 Checking bytes v1.12.1 Checking once_cell v1.21.4 Checking crypto-common v0.1.7 Checking log v0.4.34 Compiling icu_properties_data v2.3.0 Compiling icu_normalizer_data v2.3.0 Checking subtle v2.6.1 Checking tracing-core v0.1.36 Checking futures-core v0.3.34 Checking zerofrom v0.1.8 Checking stable_deref_trait v1.2.1 Checking yoke v0.8.3 Compiling num-traits v0.2.19 Checking socket2 v0.6.5 Checking errno v0.3.14 Checking smallvec v1.16.2 Checking signal-hook-registry v1.4.8 Checking tracing v0.1.44 Compiling tokio-macros v2.7.2 Checking mio v1.2.4 Checking tokio v1.53.2 Checking zerovec v0.11.8 Checking futures-sink v0.3.34 Checking slab v0.4.12 Compiling thiserror-impl v2.0.21 Compiling parking_lot_core v0.9.12 Compiling crossbeam-utils v0.8.23 Checking tinystr v0.8.4 Checking block-buffer v0.10.4 Checking cpufeatures v0.2.17 Checking writeable v0.6.4 Checking litemap v0.8.3 Checking digest v0.10.7 Checking icu_locale_core v2.3.0 Checking potential_utf v0.1.6 Checking zerotrie v0.2.5 Compiling serde_json v1.0.151 Checking utf8_iter v1.0.4 Checking icu_collections v2.3.0 Checking icu_provider v2.3.1 Checking zmij v1.0.23 Checking either v1.18.0 Checking percent-encoding v2.3.2 Checking equivalent v1.0.2 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Checking icu_properties v2.3.0 Checking icu_normalizer v2.3.0 Checking form_urlencoded v1.2.2 Compiling futures-macro v0.3.34 Checking hashbrown v0.17.1 Checking futures-io v0.3.34 Checking futures-task v0.3.34 Checking indexmap v2.14.2 Checking futures-util v0.3.34 Checking idna_adapter v1.2.2 Checking thiserror v2.0.21 Compiling libsqlite3-sys v0.30.1 Checking idna v1.1.0 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling hashbrown v0.15.5 Compiling parking_lot v0.12.5 Checking url v2.5.8 Checking futures-channel v0.3.34 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Checking bitflags v2.13.2 Compiling sha2 v0.10.9 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling crossbeam-queue v0.3.14 Compiling tokio-stream v0.1.19 Compiling futures-intrusive v0.5.0 Compiling hashlink v0.10.0 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling base64 v0.22.1 Compiling sqlx-core v0.8.6 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling sqlx-sqlite v0.8.6 Compiling dotenvy v0.15.7 Compiling hex v0.4.3 Compiling sqlx-macros-core v0.8.6 Compiling sqlx-macros v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api) Compiling nix v0.30.1 Checking memoffset v0.9.1 Compiling openssl-src v300.6.1+3.6.3 Checking sqlx v0.8.6 Compiling openssl-sys v0.9.117 Checking rand_core v0.10.1 Compiling openssl v0.10.81 Checking foreign-types-shared v0.1.1 Compiling getrandom v0.4.3 Checking foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Checking uuid v1.27.0 Checking zeroize v1.9.0 Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol) Checking arrayvec v0.7.8 Checking vte v0.15.0 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim) Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh) Compiling zerocopy v0.8.60 Compiling zerocopy-derive v0.8.60 Compiling ring v0.17.14 Checking http v1.5.0 Checking ppv-lite86 v0.2.21 Checking untrusted v0.9.0 Compiling getrandom v0.3.4 Checking half v2.7.1 Checking rustls-pki-types v1.15.1 Compiling rustls v0.23.45 Checking tinyvec v1.13.3 Checking cpufeatures v0.3.1 Checking chacha20 v0.10.2 Checking rustls-webpki v0.103.15 Compiling quinn-udp v0.5.16 Checking minimal-lexical v0.2.1 Compiling thiserror v1.0.69 Compiling httparse v1.10.1 Checking regex-syntax v0.8.11 Compiling num-conv v0.2.2 Compiling time-core v0.1.9 Compiling tokio-openssl v0.6.5 Compiling time-macros v0.2.32 Checking regex-automata v0.4.18 Checking nom v7.1.3 Checking rand_core v0.9.5 Checking rand v0.10.3 Checking http-body v1.1.0 Checking rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Checking deranged v0.5.8 Checking lru-slab v0.1.3 Checking rustc-hash v2.1.3 Checking powerfmt v0.2.1 Checking time v0.3.55 Checking quinn-proto v0.11.19 Compiling asn1-rs-derive v0.5.1 Checking rand_chacha v0.9.0 Checking rusticata-macros v4.1.0 Checking tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Checking data-encoding v2.11.1 Checking tower-service v0.3.3 Checking asn1-rs v0.6.2 Checking rand v0.9.5 Checking num-integer v0.1.47 Checking base64 v0.21.7 Checking lazy_static v1.5.1 Compiling pastey v0.1.1 Checking fnv v1.0.7 Checking atomic-waker v1.1.2 Checking httpdate v1.0.3 Checking try-lock v0.2.5 Compiling oid-registry v0.7.1 Checking want v0.3.2 Checking h2 v0.4.19 Checking base64urlsafedata v0.5.5 Checking num-bigint v0.4.8 Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts) Checking tower-layer v0.3.3 Compiling webauthn-attestation-ca v0.5.5 Compiling unicase v2.10.0 Checking mime v0.3.17 Compiling rustversion v1.0.23 Compiling mime_guess v2.0.5 Checking der-parser v9.0.0 Checking hyper v1.11.1 Checking http-body-util v0.1.5 Checking sha1 v0.10.7 Compiling fs-err v3.3.2 Checking sync_wrapper v1.0.2 Compiling webauthn-rs-core v0.5.5 Checking tungstenite v0.29.0 Checking x509-parser v0.16.0 Checking hyper-util v0.1.21 Checking webauthn-rs-proto v0.5.5 Checking serde_cbor_2 v0.13.0 Checking rand_chacha v0.3.1 Checking hex-conservative v0.2.3 Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release) Checking base64ct v1.8.3 Checking password-hash v0.5.0 Checking bitcoin_hashes v0.14.101 Checking rand v0.8.8 Checking arc-swap v1.9.2 Checking tokio-tungstenite v0.29.0 Checking axum-core v0.5.6 Checking tower v0.5.3 Checking sharded-slab v0.1.7 Checking matchers v0.2.0 Checking unicode-normalization v0.1.25 Checking blake2 v0.10.6 Checking tracing-serde v0.2.0 Checking tracing-log v0.2.0 Checking serde_path_to_error v0.1.20 Checking thread_local v1.1.10 Checking matchit v0.8.4 Checking nu-ansi-term v0.50.3 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server) Checking http-range-header v0.4.2 Checking tower-http v0.6.11 Checking tracing-subscriber v0.3.23 Checking axum v0.8.9 Checking argon2 v0.5.3 Checking bip39 v2.2.2 Compiling libfuzzer-sys v0.4.13 Checking utf8parse v0.2.2 Checking anstyle-parse v1.0.0 Checking colorchoice v1.0.5 Checking arbitrary v1.4.2 Checking anstyle v1.0.14 Checking anstyle-query v1.1.5 Checking is_terminal_polyfill v1.70.2 Checking anstream v1.0.0 Checking strsim v0.11.1 Checking clap_lex v1.1.1 Checking clap_builder v4.6.7 Compiling clap_derive v4.6.7 Checking clap v4.6.7 Checking inout v0.1.4 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal) Checking cipher v0.4.4 Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup) Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay) Checking universal-hash v0.5.1 Checking unicode-width v0.2.2 Checking opaque-debug v0.3.1 Checking polyval v0.6.2 Checking vt100 v0.16.2 Checking ghash v0.5.1 Checking ctr v0.9.2 Checking aes v0.8.4 Checking hmac v0.12.1 Checking aead v0.5.2 Checking aes-gcm v0.10.3 Checking hkdf v0.12.4 Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling rayon-core v1.13.0 Checking plotters-backend v0.3.7 Checking ciborium-io v0.2.2 Checking ciborium-ll v0.2.2 Checking plotters-svg v0.3.7 Checking itertools v0.13.0 Checking same-file v1.0.6 Checking cast v0.3.0 Checking criterion-plot v0.6.0 Checking walkdir v2.5.0 Checking rayon v1.12.0 Checking plotters v0.3.7 Checking ciborium v0.2.2 Checking regex v1.13.1 Checking tinytemplate v1.2.1 Checking oorandom v11.1.5 Checking anes v0.1.6 Checking criterion v0.7.0 Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh) Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent) Checking axum-server v0.8.0 Checking webauthn-rs v0.5.5 Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 7m 03s ==> test Compiling memchr v2.8.3 Compiling serde_core v1.0.229 Compiling getrandom v0.2.17 Compiling typenum v1.20.1 Compiling generic-array v0.14.7 Compiling futures-core v0.3.34 Compiling once_cell v1.21.4 Compiling serde v1.0.229 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling rand_core v0.6.4 Compiling zerovec v0.11.8 Compiling crypto-common v0.1.7 Compiling subtle v2.6.1 Compiling writeable v0.6.4 Compiling tinystr v0.8.4 Compiling litemap v0.8.3 Compiling log v0.4.34 Compiling icu_locale_core v2.3.0 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling tracing-core v0.1.36 Compiling utf8_iter v1.0.4 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling block-buffer v0.10.4 Compiling icu_normalizer_data v2.3.0 Compiling smallvec v1.16.2 Compiling cpufeatures v0.2.17 Compiling icu_properties_data v2.3.0 Compiling tracing v0.1.44 Compiling percent-encoding v2.3.2 Compiling tokio v1.53.2 Compiling icu_properties v2.3.0 Compiling num-traits v0.2.19 Compiling futures-sink v0.3.34 Compiling form_urlencoded v1.2.2 Compiling equivalent v1.0.2 Compiling scopeguard v1.2.0 Compiling slab v0.4.12 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling lock_api v0.4.14 Compiling hashbrown v0.17.1 Compiling indexmap v2.14.2 Compiling thiserror v2.0.21 Compiling crossbeam-utils v0.8.23 Compiling digest v0.10.7 Compiling either v1.18.0 Compiling serde_json v1.0.151 Compiling icu_normalizer v2.3.0 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling hashbrown v0.15.5 Compiling futures-util v0.3.34 Compiling idna_adapter v1.2.2 Compiling parking v2.2.1 Compiling ryu v1.0.23 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling idna v1.1.0 Compiling hashlink v0.10.0 Compiling parking_lot_core v0.9.12 Compiling spin v0.9.9 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling parking_lot v0.12.5 Compiling url v2.5.8 Compiling futures-channel v0.3.34 Compiling crossbeam-queue v0.3.14 Compiling tokio-stream v0.1.19 Compiling futures-intrusive v0.5.0 Compiling libsqlite3-sys v0.30.1 Compiling sha2 v0.10.9 Compiling hex v0.4.3 Compiling atoi v2.0.0 Compiling sqlx-core v0.8.6 Compiling futures-executor v0.3.34 Compiling flume v0.11.1 Compiling serde_urlencoded v0.7.1 Compiling base64 v0.22.1 Compiling sqlx-sqlite v0.8.6 Compiling sqlx-macros-core v0.8.6 Compiling sqlx-macros v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api) Compiling nix v0.30.1 Compiling sqlx v0.8.6 Compiling rand_core v0.10.1 Compiling foreign-types-shared v0.1.1 Compiling openssl-sys v0.9.117 Compiling foreign-types v0.3.2 Compiling getrandom v0.4.3 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol) Compiling vte v0.15.0 Compiling openssl v0.10.81 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim) Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh) Compiling zerocopy v0.8.60 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh) Compiling untrusted v0.9.0 Compiling ring v0.17.14 Compiling rustls-pki-types v1.15.1 Compiling http v1.5.0 Compiling tinyvec v1.13.3 Compiling cpufeatures v0.3.1 Compiling chacha20 v0.10.2 Compiling rustls-webpki v0.103.15 Compiling ppv-lite86 v0.2.21 Compiling rand v0.10.3 Compiling rustls v0.23.45 Compiling half v2.7.1 Compiling rand_pcg v0.10.2 Compiling lru-slab v0.1.3 Compiling rustc-hash v2.1.3 Compiling quinn-udp v0.5.16 Compiling getrandom v0.3.4 Compiling tokio-openssl v0.6.5 Compiling regex-syntax v0.8.11 Compiling quinn-proto v0.11.19 Compiling time-core v0.1.9 Compiling num-conv v0.2.2 Compiling minimal-lexical v0.2.1 Compiling nom v7.1.3 Compiling time-macros v0.2.32 Compiling regex-automata v0.4.18 Compiling quinn v0.11.12 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling thiserror v1.0.69 Compiling time v0.3.55 Compiling rand_chacha v0.9.0 Compiling httparse v1.10.1 Compiling rusticata-macros v4.1.0 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts) Compiling tokio-util v0.7.19 Compiling data-encoding v2.11.1 Compiling tower-service v0.3.3 Compiling asn1-rs v0.6.2 Compiling rand v0.9.5 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote) Compiling num-integer v0.1.47 Compiling httpdate v1.0.3 Compiling base64 v0.21.7 Compiling try-lock v0.2.5 Compiling atomic-waker v1.1.2 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling unicase v2.10.0 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling oid-registry v0.7.1 Compiling http-body-util v0.1.5 Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release) Compiling hyper v1.11.1 Compiling sha1 v0.10.7 Compiling sync_wrapper v1.0.2 Compiling tungstenite v0.29.0 Compiling hyper-util v0.1.21 Compiling x509-parser v0.16.0 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-proto v0.5.5 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent) Compiling serde_cbor_2 v0.13.0 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling webauthn-rs-core v0.5.5 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling fs-err v3.3.2 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling matchers v0.2.0 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-log v0.2.0 Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling http-range-header v0.4.2 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server) Compiling tower-http v0.6.11 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling webauthn-rs v0.5.5 Compiling axum-server v0.8.0 Compiling clap v4.6.7 Compiling inout v0.1.4 Compiling cipher v0.4.4 Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay) Compiling universal-hash v0.5.1 Compiling opaque-debug v0.3.1 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal) Compiling polyval v0.6.2 Compiling vt100 v0.16.2 Compiling ghash v0.5.1 Compiling ctr v0.9.2 Compiling aes v0.8.4 Compiling hmac v0.12.1 Compiling aead v0.5.2 Compiling aes-gcm v0.10.3 Compiling hkdf v0.12.4 Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling plotters-backend v0.3.7 Compiling ciborium-io v0.2.2 Compiling ciborium-ll v0.2.2 Compiling plotters-svg v0.3.7 Compiling rayon-core v1.13.0 Compiling itertools v0.13.0 Compiling same-file v1.0.6 Compiling cast v0.3.0 Compiling criterion-plot v0.6.0 Compiling walkdir v2.5.0 Compiling rayon v1.12.0 Compiling plotters v0.3.7 Compiling ciborium v0.2.2 Compiling regex v1.13.1 Compiling tinytemplate v1.2.1 Compiling anes v0.1.6 Compiling oorandom v11.1.5 Compiling criterion v0.7.0 Finished `test` profile [unoptimized + debuginfo] target(s) in 5m 04s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal-ff26c3ff78ebab6f) running 77 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 26.72s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_daemon-655727f9f0cc0d46) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.37s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_queues-0db8eea61c377b38) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.66s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_review-30a33faa48ae32cc) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.47s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/agent_sessions-8e431b0b38cea6e6) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/idle_canary-be7f97f2723a1f42) running 1 test ````
kayg commented 2026-10-13 11:59:04 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 2/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/key_memory-540eb1e738739f76)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/remote_output-e3f64bf80a5c5efa)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_bounds_review-52d8c640e8ddf537)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_exit_events-bafddf2afef7b798)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.90s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_retention-13964017ec49e430)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/setup_output-80a777d2e95dde79)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/shim-0b450d7b32e83e12)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.31s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/ssh_askpass-92b924c5ea0a32fa)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.89s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/vt_credit-393a6c6d6c7b57f0)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.29s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/vt_reconnect-a434ebf1242fcdb9)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.55s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_agent-a1f8a8c7795816f5)

running 110 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok
test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok
test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok
test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok
test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 25.67s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/transport-0c6a2226704f5d95)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_mesh-b05cf1923316cb2f)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/default_arrow-c3dcd9519cdc97fa)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/properties-5179c55b52944b40)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.61s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/rotation_time-a76bcb54ef244af6)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 20 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507)

running 36 tests
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok

test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/authorized_local_binding-02e1712d695000e1)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/canonical_host_binding-916e8fce54d8a01d)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/configuration-6f70d40a46624bab)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/kernel-5b936888583d9b02)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_snapshot_ordering-786d38945646c0be)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/restart_route_ownership-992b255b044a9651)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_firewall_marker-ad98c08959d40740)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_ingress_translation-9963f8f8e8768c22)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_local_delivery-19483e34d744b3a5)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
Independent review scripts/verify fast transcript 2/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/key_memory-540eb1e738739f76) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/remote_output-e3f64bf80a5c5efa) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_bounds_review-52d8c640e8ddf537) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_exit_events-bafddf2afef7b798) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.90s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/session_retention-13964017ec49e430) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/setup_output-80a777d2e95dde79) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/shim-0b450d7b32e83e12) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.31s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/ssh_askpass-92b924c5ea0a32fa) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.89s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/vt_credit-393a6c6d6c7b57f0) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.29s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/vt_reconnect-a434ebf1242fcdb9) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.55s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_agent-a1f8a8c7795816f5) running 110 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 25.67s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/transport-0c6a2226704f5d95) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_mesh-b05cf1923316cb2f) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/default_arrow-c3dcd9519cdc97fa) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/properties-5179c55b52944b40) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.61s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/rotation_time-a76bcb54ef244af6) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 20 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507) running 36 tests test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/authorized_local_binding-02e1712d695000e1) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/canonical_host_binding-916e8fce54d8a01d) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/configuration-6f70d40a46624bab) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/kernel-5b936888583d9b02) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/policy_snapshot_ordering-786d38945646c0be) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/restart_route_ownership-992b255b044a9651) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_firewall_marker-ad98c08959d40740) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_ingress_translation-9963f8f8e8768c22) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_local_delivery-19483e34d744b3a5) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. ````
kayg commented 2026-10-13 11:59:06 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 3/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_restart_routes-625128aab2b72d2b)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_route_scope-82ef3cd668a5c05b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/settings-09c6f45130d46b90)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/store-85e53d30e28569e2)

running 5 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.79s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_pool-a5ae45463b56b863)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.58s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_restart-d5419ea9777c8002)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1)

running 18 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.60s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad)

running 15 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/auth_order-f78cc1dee4b06c31)

running 7 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/build_removal-253a4c925e5f39ec)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/concurrency-be6c561d159ecb5d)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/config_isolation-36494b162d480b2b)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/credentials-ebf5e138f5fb987d)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.97s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/diagnostics-e49727da7f718425)

running 10 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/event_metadata-1e4844aa689cc5bb)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/foreground-dd7cdc0f2219b614)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/host_trust-0b542cac1c02e799)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/install-6999211aa6d0fbca)

running 48 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.03s

     Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_ssh-4a0f79768b79bf0e)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/model-aa5d54a8fa1538a1)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/payload_source-d6f1e1c864fc0b02)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/probe_check-f3b0fb8475856a2e)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/process-ee385aa3b6bba8e2)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/proxy_policy-6168b25c0aef8710)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/real_ssh-64ea6957d0d5a5fd)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/single_connection-3376e0f2c78cf37d)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/source_completeness-a25b442d7fcaea9f)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/trust_round2-941560f7296ab4d7)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_server-91a469d241a2f514)

running 465 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
Independent review scripts/verify fast transcript 3/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_restart_routes-625128aab2b72d2b) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_route_scope-82ef3cd668a5c05b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/settings-09c6f45130d46b90) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/store.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/store-85e53d30e28569e2) running 5 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.79s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_pool-a5ae45463b56b863) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.58s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_restart-d5419ea9777c8002) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.28s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1) running 18 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.60s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad) running 15 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/auth_order-f78cc1dee4b06c31) running 7 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/build_removal-253a4c925e5f39ec) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/concurrency-be6c561d159ecb5d) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/config_isolation-36494b162d480b2b) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/credentials-ebf5e138f5fb987d) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.97s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/diagnostics-e49727da7f718425) running 10 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/event_metadata-1e4844aa689cc5bb) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/foreground-dd7cdc0f2219b614) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/host_trust-0b542cac1c02e799) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/install-6999211aa6d0fbca) running 48 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 13.03s Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_ssh-4a0f79768b79bf0e) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/model-aa5d54a8fa1538a1) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/payload_source-d6f1e1c864fc0b02) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/probe_check-f3b0fb8475856a2e) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/process-ee385aa3b6bba8e2) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/proxy_policy-6168b25c0aef8710) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/real_ssh-64ea6957d0d5a5fd) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/single_connection-3376e0f2c78cf37d) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/source_completeness-a25b442d7fcaea9f) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/trust_round2-941560f7296ab4d7) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_server-91a469d241a2f514) running 465 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately ````
kayg commented 2026-10-13 11:59:07 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 4/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
Independent review scripts/verify fast transcript 4/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 ````
kayg commented 2026-10-13 11:59:08 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 5/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 419 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 350.24s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/catalog_startup-ec71f4283e741d89)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/enrollment-7997973c1f408dea)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_parser-a11bed8d1d607ff0)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_plugin-528f6046d03cdfce)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_role_scope-902722ff9982fa55)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/plugin_host_review-49f33e2f08350a85)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/plugin_settings_review-0663564c599d9896)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_shim-7eaae763d080ce29)

running 93 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 55.89s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/detach-c00818a1c892d25b)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.23s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mouse-23bf423bbf4a1258)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
Independent review scripts/verify fast transcript 5/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 419 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 350.24s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/catalog_startup-ec71f4283e741d89) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/enrollment-7997973c1f408dea) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_parser-a11bed8d1d607ff0) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_plugin-528f6046d03cdfce) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mesh_review_role_scope-902722ff9982fa55) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/plugin_host_review-49f33e2f08350a85) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/plugin_settings_review-0663564c599d9896) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/infraternal_shim-7eaae763d080ce29) running 93 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 55.89s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/detach-c00818a1c892d25b) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.23s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/mouse-23bf423bbf4a1258) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/size-ratchet-review/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 ````
kayg commented 2026-10-13 11:59:09 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 6/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
Independent review scripts/verify fast transcript 6/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 ````
kayg commented 2026-10-13 11:59:10 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 7/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
Independent review scripts/verify fast transcript 7/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) ````
kayg commented 2026-10-13 11:59:11 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 8/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
Independent review scripts/verify fast transcript 8/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) ````
kayg commented 2026-10-13 11:59:13 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 9/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.26
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling cfg-if v1.0.5
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling displaydoc v0.2.7
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling serde v1.0.229
   Compiling cc v1.6.0
   Compiling zerovec-derive v0.11.6
   Compiling serde_derive v1.0.229
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling pin-project-lite v0.2.17
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
   Compiling vcpkg v0.2.15
   Compiling pkg-config v0.3.34
   Compiling tracing-attributes v0.1.31
   Compiling bytes v1.12.1
   Compiling icu_properties_data v2.3.0
   Compiling once_cell v1.21.4
   Compiling memchr v2.8.3
   Compiling icu_normalizer_data v2.3.0
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling smallvec v1.16.2
   Compiling signal-hook-registry v1.4.8
   Compiling tracing v0.1.44
   Compiling tokio-macros v2.7.2
   Compiling mio v1.2.4
   Compiling zerovec v0.11.8
   Compiling tokio v1.53.2
   Compiling thiserror v2.0.21
   Compiling futures-sink v0.3.34
   Compiling subtle v2.6.1
   Compiling parking_lot_core v0.9.12
   Compiling slab v0.4.12
   Compiling thiserror-impl v2.0.21
   Compiling zmij v1.0.23
   Compiling typenum v1.20.1
   Compiling tinystr v0.8.4
   Compiling num-traits v0.2.19
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling crossbeam-utils v0.8.23
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling equivalent v1.0.2
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling libsqlite3-sys v0.30.1
   Compiling futures-macro v0.3.34
   Compiling hashbrown v0.17.1
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling futures-util v0.3.34
   Compiling indexmap v2.14.2
   Compiling idna_adapter v1.2.2
   Compiling openssl-src v300.6.1+3.6.3
   Compiling openssl-sys v0.9.117
   Compiling idna v1.1.0
   Compiling serde_json v1.0.151
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling hashbrown v0.15.5
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling cfg_aliases v0.2.2
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling sha2 v0.10.9
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling tokio-stream v0.1.19
   Compiling hashlink v0.10.0
   Compiling either v1.18.0
   Compiling spin v0.9.9
   Compiling zerocopy v0.8.60
   Compiling bitflags v2.13.2
   Compiling base64 v0.22.1
   Compiling heck v0.5.0
   Compiling ryu v1.0.23
   Compiling rand_core v0.10.1
   Compiling serde_urlencoded v0.7.1
   Compiling sqlx-core v0.8.6
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling zerocopy-derive v0.8.60
   Compiling getrandom v0.4.3
   Compiling sqlx-sqlite v0.8.6
   Compiling getrandom v0.2.17
   Compiling dotenvy v0.15.7
   Compiling hex v0.4.3
   Compiling sqlx-macros-core v0.8.6
   Compiling foreign-types-shared v0.1.1
   Compiling openssl v0.10.81
   Compiling foreign-types v0.3.2
   Compiling sqlx-macros v0.8.6
   Compiling http v1.5.0
   Compiling openssl-macros v0.1.1
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api)
   Compiling sqlx v0.8.6
   Compiling ppv-lite86 v0.2.21
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling nix v0.30.1
   Compiling zeroize v1.9.0
   Compiling ring v0.17.14
   Compiling num-conv v0.2.2
   Compiling thiserror v1.0.69
   Compiling httparse v1.10.1
   Compiling minimal-lexical v0.2.1
   Compiling arrayvec v0.7.8
   Compiling time-core v0.1.9
   Compiling time-macros v0.2.32
   Compiling nom v7.1.3
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling uuid v1.27.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling untrusted v0.9.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling time v0.3.55
   Compiling asn1-rs-derive v0.5.1
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling rustls-pki-types v1.15.1
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling rustls v0.23.45
   Compiling tinyvec v1.13.3
   Compiling cpufeatures v0.3.1
   Compiling chacha20 v0.10.2
   Compiling asn1-rs v0.6.2
   Compiling rustls-webpki v0.103.15
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling quinn-udp v0.5.16
   Compiling num-integer v0.1.47
   Compiling try-lock v0.2.5
   Compiling tokio-openssl v0.6.5
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling httpdate v1.0.3
   Compiling fnv v1.0.7
   Compiling oid-registry v0.7.1
   Compiling atomic-waker v1.1.2
   Compiling pastey v0.1.1
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim)
   Compiling base64urlsafedata v0.5.5
   Compiling h2 v0.4.19
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling unicase v2.10.0
   Compiling rustc-hash v2.1.3
   Compiling webauthn-attestation-ca v0.5.5
   Compiling rustversion v1.0.23
   Compiling lru-slab v0.1.3
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol)
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling quinn-proto v0.11.19
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling hyper v1.11.1
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling webauthn-rs-core v0.5.5
   Compiling sync_wrapper v1.0.2
   Compiling utf8parse v0.2.2
   Compiling regex-syntax v0.8.11
   Compiling regex-automata v0.4.18
   Compiling anstyle-parse v1.0.0
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling hyper-util v0.1.21
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh)
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle v1.0.14
   Compiling base64ct v1.8.3
   Compiling anstyle-query v1.1.5
   Compiling colorchoice v1.0.5
   Compiling anstream v1.0.0
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling matchers v0.2.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling clap_lex v1.1.1
   Compiling http-range-header v0.4.2
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server)
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling strsim v0.11.1
   Compiling clap_builder v4.6.7
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling tower-http v0.6.11
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release)
   Compiling clap_derive v4.6.7
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal)
   Compiling clap v4.6.7
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh)
   Compiling axum-server v0.8.0
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 12m 29s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/size-ratchet-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 22204304 bytes (max 22204304; allowance 0)
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Command
  State   ready
  Detail  Key memory initialization=1; locked pages and dump exclusion enabled
  Next    Run this check under an 8 MiB memlock limit.
   Compiling libc v0.2.190
   Compiling cfg-if v1.0.5
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling serde v1.0.229
   Compiling bytes v1.12.1
   Compiling once_cell v1.21.4
   Compiling memchr v2.8.3
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling smallvec v1.16.2
   Compiling signal-hook-registry v1.4.8
   Compiling tracing v0.1.44
   Compiling mio v1.2.4
   Compiling zerovec v0.11.8
   Compiling tokio v1.53.2
   Compiling futures-sink v0.3.34
   Compiling slab v0.4.12
   Compiling subtle v2.6.1
   Compiling generic-array v0.14.7
   Compiling typenum v1.20.1
   Compiling tinystr v0.8.4
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling icu_locale_core v2.3.0
   Compiling num-traits v0.2.19
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling percent-encoding v2.3.2
   Compiling equivalent v1.0.2
   Compiling digest v0.10.7
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling thiserror v2.0.21
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling futures-util v0.3.34
   Compiling indexmap v2.14.2
   Compiling idna_adapter v1.2.2
   Compiling cpufeatures v0.2.17
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling idna v1.1.0
   Compiling zmij v1.0.23
   Compiling serde_json v1.0.151
   Compiling openssl-sys v0.9.117
   Compiling url v2.5.8
   Compiling parking_lot_core v0.9.12
   Compiling futures-channel v0.3.34
   Compiling crossbeam-utils v0.8.23
   Compiling rand_core v0.10.1
   Compiling foldhash v0.1.5
   Compiling bitflags v2.13.2
   Compiling allocator-api2 v0.2.21
   Compiling hashbrown v0.15.5
   Compiling zerocopy v0.8.60
   Compiling parking_lot v0.12.5
   Compiling either v1.18.0
   Compiling base64 v0.22.1
   Compiling ryu v1.0.23
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling getrandom v0.4.3
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling serde_urlencoded v0.7.1
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling hashlink v0.10.0
   Compiling spin v0.9.9
   Compiling sha2 v0.10.9
   Compiling libsqlite3-sys v0.30.1
   Compiling tokio-stream v0.1.19
   Compiling getrandom v0.2.17
   Compiling sqlx-core v0.8.6
   Compiling flume v0.11.1
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling foreign-types-shared v0.1.1
   Compiling foreign-types v0.3.2
   Compiling sqlx-sqlite v0.8.6
   Compiling http v1.5.0
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api)
   Compiling sqlx v0.8.6
   Compiling ppv-lite86 v0.2.21
   Compiling getrandom v0.3.4
   Compiling memoffset v0.9.1
   Compiling zeroize v1.9.0
   Compiling ring v0.17.14
   Compiling nix v0.30.1
   Compiling arrayvec v0.7.8
   Compiling minimal-lexical v0.2.1
   Compiling nom v7.1.3
   Compiling httparse v1.10.1
   Compiling thiserror v1.0.69
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling uuid v1.27.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling untrusted v0.9.0
   Compiling num-conv v0.2.2
   Compiling time-core v0.1.9
   Compiling time v0.3.55
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling rustls-pki-types v1.15.1
   Compiling tokio-util v0.7.19
   Compiling data-encoding v2.11.1
   Compiling tower-service v0.3.3
   Compiling tinyvec v1.13.3
   Compiling rustls v0.23.45
   Compiling asn1-rs v0.6.2
   Compiling rustls-webpki v0.103.15
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling chacha20 v0.10.2
   Compiling num-integer v0.1.47
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling fnv v1.0.7
   Compiling atomic-waker v1.1.2
   Compiling base64urlsafedata v0.5.5
   Compiling h2 v0.4.19
   Compiling oid-registry v0.7.1
   Compiling want v0.3.2
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim)
   Compiling num-bigint v0.4.8
   Compiling quinn-udp v0.5.16
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling rand_pcg v0.10.2
   Compiling lru-slab v0.1.3
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol)
   Compiling rustc-hash v2.1.3
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling quinn-proto v0.11.19
   Compiling quinn v0.11.12
   Compiling der-parser v9.0.0
   Compiling hyper v1.11.1
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling utf8parse v0.2.2
   Compiling regex-syntax v0.8.11
   Compiling sync_wrapper v1.0.2
   Compiling regex-automata v0.4.18
   Compiling anstyle-parse v1.0.0
   Compiling fs-err v3.3.2
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling hyper-util v0.1.21
   Compiling mime_guess v2.0.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh)
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle v1.0.14
   Compiling hex v0.4.3
   Compiling anstyle-query v1.1.5
   Compiling unicase v2.10.0
   Compiling colorchoice v1.0.5
   Compiling base64ct v1.8.3
   Compiling password-hash v0.5.0
   Compiling anstream v1.0.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling matchers v0.2.0
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling strsim v0.11.1
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling clap_lex v1.1.1
   Compiling http-range-header v0.4.2
   Compiling tower-http v0.6.11
   Compiling clap_builder v4.6.7
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server)
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal)
   Compiling clap v4.6.7
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup)
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh)
   Compiling axum-server v0.8.0
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 8m 57s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/size-ratchet-review/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19638744 bytes (max 19638744; allowance 0)
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 22204304-byte cap PASS; 22204305 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19638744-byte cap PASS; 19638745 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
server subcommand: exit 2, versioned JSON unavailable result
agent subcommand: exit 2, versioned JSON unavailable result

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [444.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [36.45ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [32.15ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [4.54ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.12ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.28ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.46ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.11ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.40ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.36ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.14ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [1.06ms]
(pass) repeating the front item changes nothing [0.09ms]
(pass) the list is capped, so the oldest items fall off [0.07ms]
(pass) top skips items that are no longer live, without losing them [0.11ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.26ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.06ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [1.34ms]
(pass) routine connection states stay out of the toast [0.15ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.61ms]
(pass) a deferred new:below selection retains its original window [0.04ms]
(pass) a deferred close selection retains its original window [0.02ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.88ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.21ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.20ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.15ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.10ms]
(pass) before facts arrive the host's platform names the header [0.04ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.04ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.48ms]
(pass) without `access` (today's server) the person may view and may not edit [0.18ms]
(pass) fields the server does not send are absent, never invented [0.10ms]
(pass) anything that is not a list is refused, whole [23.16ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.26ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.20ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.07ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.54ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.63ms]
(pass) the layout is deterministic and does not depend on input order [3.90ms]
(pass) no two cards overlap, and every card lies inside the graph [3.58ms]
(pass) the sheet is wider than tall, roughly 16:10 [0.92ms]
(pass) a pinned node stays where it was put and the others do not move [1.70ms]
(pass) a pin beyond the sheet grows the graph [0.15ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.11ms]
(pass) 1,000 nodes lay out in a few milliseconds [7.96ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.22ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.12ms]
(pass) a view taller than the viewport is scaled down so it fits [0.02ms]
(pass) nearestStop picks the stop whose centre is closest [0.08ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.11ms]
(pass) a small graph keeps one stop per node column [0.10ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.93ms]
(pass) closing the new half gives the layout back exactly, in the model [0.80ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.29ms]
Independent review scripts/verify fast transcript 9/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Compiling proc-macro2 v1.0.107 Compiling unicode-ident v1.0.26 Compiling quote v1.0.47 Compiling libc v0.2.190 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling cfg-if v1.0.5 Compiling synstructure v0.14.0 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling displaydoc v0.2.7 Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Compiling serde v1.0.229 Compiling cc v1.6.0 Compiling zerovec-derive v0.11.6 Compiling serde_derive v1.0.229 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling pin-project-lite v0.2.17 Compiling version_check v0.9.5 Compiling generic-array v0.14.7 Compiling vcpkg v0.2.15 Compiling pkg-config v0.3.34 Compiling tracing-attributes v0.1.31 Compiling bytes v1.12.1 Compiling icu_properties_data v2.3.0 Compiling once_cell v1.21.4 Compiling memchr v2.8.3 Compiling icu_normalizer_data v2.3.0 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling smallvec v1.16.2 Compiling signal-hook-registry v1.4.8 Compiling tracing v0.1.44 Compiling tokio-macros v2.7.2 Compiling mio v1.2.4 Compiling zerovec v0.11.8 Compiling tokio v1.53.2 Compiling thiserror v2.0.21 Compiling futures-sink v0.3.34 Compiling subtle v2.6.1 Compiling parking_lot_core v0.9.12 Compiling slab v0.4.12 Compiling thiserror-impl v2.0.21 Compiling zmij v1.0.23 Compiling typenum v1.20.1 Compiling tinystr v0.8.4 Compiling num-traits v0.2.19 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling crossbeam-utils v0.8.23 Compiling icu_locale_core v2.3.0 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling equivalent v1.0.2 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling form_urlencoded v1.2.2 Compiling libsqlite3-sys v0.30.1 Compiling futures-macro v0.3.34 Compiling hashbrown v0.17.1 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling futures-util v0.3.34 Compiling indexmap v2.14.2 Compiling idna_adapter v1.2.2 Compiling openssl-src v300.6.1+3.6.3 Compiling openssl-sys v0.9.117 Compiling idna v1.1.0 Compiling serde_json v1.0.151 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling hashbrown v0.15.5 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling cfg_aliases v0.2.2 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling sha2 v0.10.9 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling tokio-stream v0.1.19 Compiling hashlink v0.10.0 Compiling either v1.18.0 Compiling spin v0.9.9 Compiling zerocopy v0.8.60 Compiling bitflags v2.13.2 Compiling base64 v0.22.1 Compiling heck v0.5.0 Compiling ryu v1.0.23 Compiling rand_core v0.10.1 Compiling serde_urlencoded v0.7.1 Compiling sqlx-core v0.8.6 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling zerocopy-derive v0.8.60 Compiling getrandom v0.4.3 Compiling sqlx-sqlite v0.8.6 Compiling getrandom v0.2.17 Compiling dotenvy v0.15.7 Compiling hex v0.4.3 Compiling sqlx-macros-core v0.8.6 Compiling foreign-types-shared v0.1.1 Compiling openssl v0.10.81 Compiling foreign-types v0.3.2 Compiling sqlx-macros v0.8.6 Compiling http v1.5.0 Compiling openssl-macros v0.1.1 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api) Compiling sqlx v0.8.6 Compiling ppv-lite86 v0.2.21 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling nix v0.30.1 Compiling zeroize v1.9.0 Compiling ring v0.17.14 Compiling num-conv v0.2.2 Compiling thiserror v1.0.69 Compiling httparse v1.10.1 Compiling minimal-lexical v0.2.1 Compiling arrayvec v0.7.8 Compiling time-core v0.1.9 Compiling time-macros v0.2.32 Compiling nom v7.1.3 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling uuid v1.27.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling untrusted v0.9.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling time v0.3.55 Compiling asn1-rs-derive v0.5.1 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling rustls-pki-types v1.15.1 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling rustls v0.23.45 Compiling tinyvec v1.13.3 Compiling cpufeatures v0.3.1 Compiling chacha20 v0.10.2 Compiling asn1-rs v0.6.2 Compiling rustls-webpki v0.103.15 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling quinn-udp v0.5.16 Compiling num-integer v0.1.47 Compiling try-lock v0.2.5 Compiling tokio-openssl v0.6.5 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling httpdate v1.0.3 Compiling fnv v1.0.7 Compiling oid-registry v0.7.1 Compiling atomic-waker v1.1.2 Compiling pastey v0.1.1 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim) Compiling base64urlsafedata v0.5.5 Compiling h2 v0.4.19 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling unicase v2.10.0 Compiling rustc-hash v2.1.3 Compiling webauthn-attestation-ca v0.5.5 Compiling rustversion v1.0.23 Compiling lru-slab v0.1.3 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol) Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling quinn-proto v0.11.19 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling hyper v1.11.1 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling webauthn-rs-core v0.5.5 Compiling sync_wrapper v1.0.2 Compiling utf8parse v0.2.2 Compiling regex-syntax v0.8.11 Compiling regex-automata v0.4.18 Compiling anstyle-parse v1.0.0 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling hyper-util v0.1.21 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh) Compiling is_terminal_polyfill v1.70.2 Compiling anstyle v1.0.14 Compiling base64ct v1.8.3 Compiling anstyle-query v1.1.5 Compiling colorchoice v1.0.5 Compiling anstream v1.0.0 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling matchers v0.2.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling clap_lex v1.1.1 Compiling http-range-header v0.4.2 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server) Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling strsim v0.11.1 Compiling clap_builder v4.6.7 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling tower-http v0.6.11 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release) Compiling clap_derive v4.6.7 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal) Compiling clap v4.6.7 Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh) Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh) Compiling axum-server v0.8.0 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 12m 29s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/size-ratchet-review/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 22204304 bytes (max 22204304; allowance 0) key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Command State ready Detail Key memory initialization=1; locked pages and dump exclusion enabled Next Run this check under an 8 MiB memlock limit. Compiling libc v0.2.190 Compiling cfg-if v1.0.5 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling serde v1.0.229 Compiling bytes v1.12.1 Compiling once_cell v1.21.4 Compiling memchr v2.8.3 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling smallvec v1.16.2 Compiling signal-hook-registry v1.4.8 Compiling tracing v0.1.44 Compiling mio v1.2.4 Compiling zerovec v0.11.8 Compiling tokio v1.53.2 Compiling futures-sink v0.3.34 Compiling slab v0.4.12 Compiling subtle v2.6.1 Compiling generic-array v0.14.7 Compiling typenum v1.20.1 Compiling tinystr v0.8.4 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling icu_locale_core v2.3.0 Compiling num-traits v0.2.19 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_collections v2.3.0 Compiling icu_provider v2.3.1 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling icu_properties_data v2.3.0 Compiling icu_normalizer_data v2.3.0 Compiling percent-encoding v2.3.2 Compiling equivalent v1.0.2 Compiling digest v0.10.7 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling form_urlencoded v1.2.2 Compiling thiserror v2.0.21 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling futures-util v0.3.34 Compiling indexmap v2.14.2 Compiling idna_adapter v1.2.2 Compiling cpufeatures v0.2.17 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling idna v1.1.0 Compiling zmij v1.0.23 Compiling serde_json v1.0.151 Compiling openssl-sys v0.9.117 Compiling url v2.5.8 Compiling parking_lot_core v0.9.12 Compiling futures-channel v0.3.34 Compiling crossbeam-utils v0.8.23 Compiling rand_core v0.10.1 Compiling foldhash v0.1.5 Compiling bitflags v2.13.2 Compiling allocator-api2 v0.2.21 Compiling hashbrown v0.15.5 Compiling zerocopy v0.8.60 Compiling parking_lot v0.12.5 Compiling either v1.18.0 Compiling base64 v0.22.1 Compiling ryu v1.0.23 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling getrandom v0.4.3 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling serde_urlencoded v0.7.1 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling hashlink v0.10.0 Compiling spin v0.9.9 Compiling sha2 v0.10.9 Compiling libsqlite3-sys v0.30.1 Compiling tokio-stream v0.1.19 Compiling getrandom v0.2.17 Compiling sqlx-core v0.8.6 Compiling flume v0.11.1 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling foreign-types-shared v0.1.1 Compiling foreign-types v0.3.2 Compiling sqlx-sqlite v0.8.6 Compiling http v1.5.0 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-plugin-api) Compiling sqlx v0.8.6 Compiling ppv-lite86 v0.2.21 Compiling getrandom v0.3.4 Compiling memoffset v0.9.1 Compiling zeroize v1.9.0 Compiling ring v0.17.14 Compiling nix v0.30.1 Compiling arrayvec v0.7.8 Compiling minimal-lexical v0.2.1 Compiling nom v7.1.3 Compiling httparse v1.10.1 Compiling thiserror v1.0.69 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling uuid v1.27.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling untrusted v0.9.0 Compiling num-conv v0.2.2 Compiling time-core v0.1.9 Compiling time v0.3.55 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling rustls-pki-types v1.15.1 Compiling tokio-util v0.7.19 Compiling data-encoding v2.11.1 Compiling tower-service v0.3.3 Compiling tinyvec v1.13.3 Compiling rustls v0.23.45 Compiling asn1-rs v0.6.2 Compiling rustls-webpki v0.103.15 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling chacha20 v0.10.2 Compiling num-integer v0.1.47 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling fnv v1.0.7 Compiling atomic-waker v1.1.2 Compiling base64urlsafedata v0.5.5 Compiling h2 v0.4.19 Compiling oid-registry v0.7.1 Compiling want v0.3.2 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-shim) Compiling num-bigint v0.4.8 Compiling quinn-udp v0.5.16 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling rand_pcg v0.10.2 Compiling lru-slab v0.1.3 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-protocol) Compiling rustc-hash v2.1.3 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling quinn-proto v0.11.19 Compiling quinn v0.11.12 Compiling der-parser v9.0.0 Compiling hyper v1.11.1 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling utf8parse v0.2.2 Compiling regex-syntax v0.8.11 Compiling sync_wrapper v1.0.2 Compiling regex-automata v0.4.18 Compiling anstyle-parse v1.0.0 Compiling fs-err v3.3.2 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling hyper-util v0.1.21 Compiling mime_guess v2.0.5 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-mesh) Compiling is_terminal_polyfill v1.70.2 Compiling anstyle v1.0.14 Compiling hex v0.4.3 Compiling anstyle-query v1.1.5 Compiling unicase v2.10.0 Compiling colorchoice v1.0.5 Compiling base64ct v1.8.3 Compiling password-hash v0.5.0 Compiling anstream v1.0.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling matchers v0.2.0 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/host-facts) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling strsim v0.11.1 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling clap_lex v1.1.1 Compiling http-range-header v0.4.2 Compiling tower-http v0.6.11 Compiling clap_builder v4.6.7 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-server) Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/release) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal) Compiling clap v4.6.7 Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/backup) Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/remote) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/mesh) Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/plugins/ssh) Compiling axum-server v0.8.0 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/review-size-ratchet/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 8m 57s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/size-ratchet-review/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19638744 bytes (max 19638744; allowance 0) key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 22204304-byte cap PASS; 22204305 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19638744-byte cap PASS; 19638745 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS server subcommand: exit 2, versioned JSON unavailable result agent subcommand: exit 2, versioned JSON unavailable result +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [444.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [36.45ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [32.15ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [4.54ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.12ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.28ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.46ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.11ms] (pass) FrameDetector > fps, p95 and window read the ring [0.40ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.36ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.14ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [1.06ms] (pass) repeating the front item changes nothing [0.09ms] (pass) the list is capped, so the oldest items fall off [0.07ms] (pass) top skips items that are no longer live, without losing them [0.11ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.26ms] (pass) recentRows: a view with three windows and no use shows them in order [0.06ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [1.34ms] (pass) routine connection states stay out of the toast [0.15ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.61ms] (pass) a deferred new:below selection retains its original window [0.04ms] (pass) a deferred close selection retains its original window [0.02ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.88ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.21ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.20ms] (pass) extended info on: every fact sits under System, Resources or Access [0.15ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.10ms] (pass) before facts arrive the host's platform names the header [0.04ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.04ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.48ms] (pass) without `access` (today's server) the person may view and may not edit [0.18ms] (pass) fields the server does not send are absent, never invented [0.10ms] (pass) anything that is not a list is refused, whole [23.16ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.26ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.20ms] (pass) answers carry the new revision, and a create the new arrow's id [0.07ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.54ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.63ms] (pass) the layout is deterministic and does not depend on input order [3.90ms] (pass) no two cards overlap, and every card lies inside the graph [3.58ms] (pass) the sheet is wider than tall, roughly 16:10 [0.92ms] (pass) a pinned node stays where it was put and the others do not move [1.70ms] (pass) a pin beyond the sheet grows the graph [0.15ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.11ms] (pass) 1,000 nodes lay out in a few milliseconds [7.96ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.22ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.12ms] (pass) a view taller than the viewport is scaled down so it fits [0.02ms] (pass) nearestStop picks the stop whose centre is closest [0.08ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.11ms] (pass) a small graph keeps one stop per node column [0.10ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.93ms] (pass) closing the new half gives the layout back exactly, in the model [0.80ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.29ms] ````
kayg commented 2026-10-13 11:59:14 +00:00
Author
Owner
Copy link

Independent review scripts/verify fast transcript 10/10; implementation 88e8a0dad8, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence.

(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.17ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.41ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.33ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.15ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.06ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.13ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [33.67ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.51ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.16ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.09ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.40ms]
(pass) a chain of neighbours is pushed in turn [0.10ms]
(pass) snapping rounds to whole cells [0.03ms]
(pass) reach follows grants through tags and keeps the relay [0.15ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.21ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.91ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.48ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.28ms]
(pass) superseded status snapshots release records for sessions this device never opened [0.80ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.10ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.11ms]
(pass) a final Close before the first positive census never revives a new ID [0.06ms]
(pass) a later absence retires a new ID after its first positive census [0.05ms]
(pass) another host's census cannot clear a new shell's census fence [0.06ms]
(pass) another host's close cannot clear a new shell's census fence [0.01ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.65ms]
(pass) a detected operating system supplies the live popover mark [0.92ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [2.03ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.09ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.04ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.07ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.17ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.07ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.67ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.13ms]
(pass) a removal in another browser withdraws the host [0.13ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.17ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.23ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.33ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.15ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.10ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [8.30ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [8.99ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.54ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.33ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.65ms]
(pass) oversized refusal JSON is ignored before parsing [0.09ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.28ms]
(pass) a document survives JSON and rebuilds the same columns [0.44ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms]
(pass) parseDocument rejects anything that is not a document of this format [0.20ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.12ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.20ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.17ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.03ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.32ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.81ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.16ms]
(pass) review listed inventory name plus port retains its resolved address [0.17ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.29ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.04ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.08ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.13ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.96ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.13ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.37ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.89ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [4.48ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.20ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.13ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.17ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.05ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms]
(pass) guideFor > each failure kind names its fix [0.12ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.59ms]
(pass) parseTarget > refuses what cannot name a host [0.04ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.62ms]
(pass) parseSshConfig > recognises config text [0.04ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.03ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.09ms]
(pass) only a completed canonical host identity becomes terminal authority [0.06ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.04ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms]
(pass) install diagnostics name the failed step and public host error [0.04ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.03ms]
(pass) release payload verification names the architecture step and plain reason [0.01ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.05ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.04ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.35ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms]
(pass) ready CA begins the requested installation mode without another prompt [0.09ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.25ms]
(pass) a typed root login requires explicit consent before any installation [0.09ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.81ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.40ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.08ms]
(pass) a chunk that both sides use stays critical [0.18ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.08ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [4.48ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.46ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [1.92ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.41ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [19.46ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [6.05ms]
(pass) abandoned word acknowledgement uploads nothing [1.90ms]
(pass) settled acknowledgement cannot upload later (dismissed) [1.89ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [1.69ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.09ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.73ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [0.72ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [2.07ms]
(pass) malformed or excessive remaining wait -1 is denied [2.28ms]
(pass) malformed or excessive remaining wait 0.5 is denied [2.04ms]
(pass) malformed or excessive remaining wait 172801 is denied [2.27ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [5.07ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.28ms]

 191 pass
 0 fail
 11387 expect() calls
Ran 191 tests across 31 files. [423.00ms]
$ bun run build.ts
built chunk-45e8w4af.js, chunk-agwf0tva.js, chunk-1y0k7gwq.js, chunk-4dh812dh.js, chunk-gajzyn0r.js, chunk-9j95sedx.js, chunk-gxvqf3b8.js, chunk-1f4exzmv.js, chunk-1r3m5wwf.js, chunk-a7qty13j.js, chunk-h9rkbc6w.js, chunk-ytpxqt0e.js, main.js, chunk-p938y84p.js, chunk-4myrwgrb.js, chunk-3st0hg2d.js, chunk-1bxqtej8.js, chunk-e2619ymg.js, chunk-rgh1mqz4.js, chunk-qpch88hg.js, chunk-yr0r38s4.js, chunk-a52hbfka.js, chunk-e1t4wzzj.js, chunk-dve14t5y.js, chunk-mrdwpq35.js, chunk-f9f8y1s9.js, chunk-axbkkqp1.js, chunk-efqa19e1.js, chunk-satkw56a.js, chunk-1y0q2rjz.js, chunk-6hpmwm51.js, chunk-b7r2w84k.js, chunk-m7dav1as.js, chunk-fghes2yf.js, chunk-2xv2cxk2.js, chunk-2db7zswa.js, chunk-tk41jmaw.js, chunk-2pmt2p2z.js, chunk-hzpqgyzg.js, chunk-h58zp44x.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-40c8whh0.js, chunk-bbjhz7vm.js, chunk-wnm5s2jy.js, chunk-ssp50gsj.js, chunk-wsv6fedv.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-ry6830rs.js, chunk-f2r0hhqc.js, chunk-p34rqwxp.js, chunk-8wn2fegk.js, chunk-314jazkh.js
deferred chunk-e1t4wzzj.js: identity=1541 gzip=791 brotli=715 bytes
critical chunk-rgh1mqz4.js: identity=590 gzip=327 brotli=301 bytes
onDemand chunk-40c8whh0.js: identity=51051 gzip=15945 brotli=14185 bytes
deferred chunk-dve14t5y.js: identity=97785 gzip=33346 brotli=29511 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-a52hbfka.js: identity=1104 gzip=666 brotli=605 bytes
critical chunk-ry6830rs.js: identity=9810 gzip=4018 brotli=3453 bytes
onDemand chunk-fghes2yf.js: identity=1649 gzip=773 brotli=675 bytes
onDemand chunk-ssp50gsj.js: identity=31924 gzip=12265 brotli=11037 bytes
onDemand chunk-p34rqwxp.js: identity=1063 gzip=651 brotli=518 bytes
critical chunk-qpch88hg.js: identity=2519 gzip=1007 brotli=878 bytes
onDemand chunk-wsv6fedv.js: identity=2462 gzip=1108 brotli=936 bytes
onDemand chunk-h9rkbc6w.js: identity=6265 gzip=2102 brotli=1868 bytes
onDemand chunk-1r3m5wwf.js: identity=2420 gzip=1199 brotli=1079 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=492 bytes
critical backdrop.worker.js: identity=243 gzip=210 brotli=159 bytes
critical chunk-1bxqtej8.js: identity=16027 gzip=6221 brotli=5542 bytes
onDemand chunk-m7dav1as.js: identity=1170 gzip=706 brotli=622 bytes
onDemand chunk-2pmt2p2z.js: identity=4640 gzip=1929 brotli=1700 bytes
critical chunk-314jazkh.js: identity=42534 gzip=14528 brotli=13001 bytes
onDemand chunk-tk41jmaw.js: identity=5359 gzip=2579 brotli=2300 bytes
critical chunk-8wn2fegk.js: identity=199 gzip=160 brotli=136 bytes
onDemand chunk-gajzyn0r.js: identity=3891 gzip=1737 brotli=1494 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-bbjhz7vm.js: identity=162 gzip=150 brotli=128 bytes
onDemand chunk-satkw56a.js: identity=6195 gzip=2790 brotli=2526 bytes
onDemand chunk-h58zp44x.js: identity=14531 gzip=5410 brotli=4849 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-efqa19e1.js: identity=707945 gzip=204706 brotli=166113 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-2xv2cxk2.js: identity=540 gzip=350 brotli=311 bytes
critical chunk-3st0hg2d.js: identity=5443 gzip=2606 brotli=2385 bytes
onDemand chunk-2db7zswa.js: identity=11529 gzip=4653 brotli=4254 bytes
onDemand chunk-a7qty13j.js: identity=191 gzip=170 brotli=137 bytes
onDemand chunk-4myrwgrb.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-ytpxqt0e.js: identity=2108 gzip=1037 brotli=870 bytes
onDemand chunk-f9f8y1s9.js: identity=1026 gzip=621 brotli=496 bytes
onDemand chunk-mrdwpq35.js: identity=10693 gzip=4124 brotli=3762 bytes
critical chunk-9j95sedx.js: identity=707 gzip=367 brotli=306 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
critical chunk-p938y84p.js: identity=8377 gzip=3575 brotli=3188 bytes
critical chunk-45e8w4af.js: identity=21235 gzip=6856 brotli=6137 bytes
critical chunk-1y0k7gwq.js: identity=4499 gzip=1858 brotli=1633 bytes
onDemand chunk-4dh812dh.js: identity=6357 gzip=2371 brotli=2110 bytes
onDemand chunk-wnm5s2jy.js: identity=6772 gzip=3177 brotli=2892 bytes
onDemand chunk-1y0q2rjz.js: identity=2824 gzip=1387 brotli=1198 bytes
deferred chunk-agwf0tva.js: identity=43046 gzip=16607 brotli=14651 bytes
onDemand chunk-hzpqgyzg.js: identity=7662 gzip=3396 brotli=2984 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=111760 gzip=40619 brotli=35252 bytes
onDemand chunk-1f4exzmv.js: identity=228 gzip=179 brotli=166 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-b7r2w84k.js: identity=1616 gzip=864 brotli=737 bytes
onDemand chunk-6hpmwm51.js: identity=4575 gzip=2015 brotli=1794 bytes
critical chunk-e2619ymg.js: identity=17627 gzip=6244 brotli=5561 bytes
JavaScript transfer, critical: identity=952686 gzip=295332/307200 brotli=245858/256000 bytes
JavaScript transfer, deferred: identity=142372 gzip=50744/51200 brotli=44877/45056 bytes
JavaScript transfer, onDemand: identity=191298 gzip=74718/20480 brotli=66509/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-40c8whh0.js: gzip=15945/20480 brotli=14185/18432 bytes (class total gzip=74718 brotli=66509, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.08ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.32ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.15ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.32ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.16ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.09ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [23.86ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.30ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [2.81ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.30ms]
(pass) split mux header preserves trailing Close [0.34ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.77ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.10ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [8.73ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.76ms]
(pass) superseded failure preserves a newer pending refresh [2.75ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [1785.98ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.96ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.80ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [3.87ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.06ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.13ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.35ms]
(pass) review continuation stops after forbidden [1.14ms]
(pass) review continuation stops after superseded [1.15ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.18ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.10ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.16ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.28ms]
(pass) watch never publishes a partial page; withdrawn=true [1.24ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.29ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.12ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.32ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.13ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.29ms]

 37 pass
 0 fail
 34463 expect() calls
Ran 37 tests across 10 files. [1.91s]
Independent review scripts/verify fast transcript 10/10; implementation 88e8a0dad8f865d004986e794ea82bba498959ea, review c2e729b0 (proof-only changes), exit 0. Build-host durations are functional diagnostics, not performance evidence. ````text (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.17ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.41ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.33ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.15ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.06ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.13ms] (pass) random sequences of split right, split down, new window right and close never break the grid [33.67ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.51ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.16ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.09ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.40ms] (pass) a chain of neighbours is pushed in turn [0.10ms] (pass) snapping rounds to whole cells [0.03ms] (pass) reach follows grants through tags and keeps the relay [0.15ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.21ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.91ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.48ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.28ms] (pass) superseded status snapshots release records for sessions this device never opened [0.80ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.10ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.11ms] (pass) a final Close before the first positive census never revives a new ID [0.06ms] (pass) a later absence retires a new ID after its first positive census [0.05ms] (pass) another host's census cannot clear a new shell's census fence [0.06ms] (pass) another host's close cannot clear a new shell's census fence [0.01ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.65ms] (pass) a detected operating system supplies the live popover mark [0.92ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [2.03ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.09ms] (pass) unknown and ambiguous labels never open an embedded shell [0.04ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.07ms] (pass) an authoritative host snapshot replaces admission with one notification [0.17ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.07ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.67ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.13ms] (pass) a removal in another browser withdraws the host [0.13ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.17ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.23ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.33ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.15ms] (pass) a known retired status survives repeated selection and generic ended answers [0.10ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [8.30ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [8.99ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.54ms] (pass) legacy refusals still work and malformed counters never reach the message [0.33ms] (pass) product copy names the host and counters and never renders untrusted server text [0.65ms] (pass) oversized refusal JSON is ignored before parsing [0.09ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.28ms] (pass) a document survives JSON and rebuilds the same columns [0.44ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms] (pass) parseDocument rejects anything that is not a document of this format [0.20ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.12ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.20ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.17ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.03ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.32ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.81ms] (pass) listed host plus port retains its saved user in the serialized destination [0.16ms] (pass) review listed inventory name plus port retains its resolved address [0.17ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.29ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.04ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.08ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.13ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.96ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.13ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.37ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.89ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [4.48ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.20ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.13ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.17ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.05ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms] (pass) guideFor > each failure kind names its fix [0.12ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.59ms] (pass) parseTarget > refuses what cannot name a host [0.04ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.62ms] (pass) parseSshConfig > recognises config text [0.04ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.03ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.09ms] (pass) only a completed canonical host identity becomes terminal authority [0.06ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.04ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms] (pass) install diagnostics name the failed step and public host error [0.04ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.03ms] (pass) release payload verification names the architecture step and plain reason [0.01ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.05ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.04ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.35ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms] (pass) ready CA begins the requested installation mode without another prompt [0.09ms] (pass) closing during CA confirmation never starts an SSH attempt [0.25ms] (pass) a typed root login requires explicit consent before any installation [0.09ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.81ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.40ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.08ms] (pass) a chunk that both sides use stays critical [0.18ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.08ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [4.48ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.46ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [1.92ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.41ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [19.46ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [6.05ms] (pass) abandoned word acknowledgement uploads nothing [1.90ms] (pass) settled acknowledgement cannot upload later (dismissed) [1.89ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [1.69ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.09ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.73ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [0.72ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [2.07ms] (pass) malformed or excessive remaining wait -1 is denied [2.28ms] (pass) malformed or excessive remaining wait 0.5 is denied [2.04ms] (pass) malformed or excessive remaining wait 172801 is denied [2.27ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [5.07ms] (pass) malformed or excessive remaining wait 90000 is denied [1.28ms] 191 pass 0 fail 11387 expect() calls Ran 191 tests across 31 files. [423.00ms] $ bun run build.ts built chunk-45e8w4af.js, chunk-agwf0tva.js, chunk-1y0k7gwq.js, chunk-4dh812dh.js, chunk-gajzyn0r.js, chunk-9j95sedx.js, chunk-gxvqf3b8.js, chunk-1f4exzmv.js, chunk-1r3m5wwf.js, chunk-a7qty13j.js, chunk-h9rkbc6w.js, chunk-ytpxqt0e.js, main.js, chunk-p938y84p.js, chunk-4myrwgrb.js, chunk-3st0hg2d.js, chunk-1bxqtej8.js, chunk-e2619ymg.js, chunk-rgh1mqz4.js, chunk-qpch88hg.js, chunk-yr0r38s4.js, chunk-a52hbfka.js, chunk-e1t4wzzj.js, chunk-dve14t5y.js, chunk-mrdwpq35.js, chunk-f9f8y1s9.js, chunk-axbkkqp1.js, chunk-efqa19e1.js, chunk-satkw56a.js, chunk-1y0q2rjz.js, chunk-6hpmwm51.js, chunk-b7r2w84k.js, chunk-m7dav1as.js, chunk-fghes2yf.js, chunk-2xv2cxk2.js, chunk-2db7zswa.js, chunk-tk41jmaw.js, chunk-2pmt2p2z.js, chunk-hzpqgyzg.js, chunk-h58zp44x.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-40c8whh0.js, chunk-bbjhz7vm.js, chunk-wnm5s2jy.js, chunk-ssp50gsj.js, chunk-wsv6fedv.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-ry6830rs.js, chunk-f2r0hhqc.js, chunk-p34rqwxp.js, chunk-8wn2fegk.js, chunk-314jazkh.js deferred chunk-e1t4wzzj.js: identity=1541 gzip=791 brotli=715 bytes critical chunk-rgh1mqz4.js: identity=590 gzip=327 brotli=301 bytes onDemand chunk-40c8whh0.js: identity=51051 gzip=15945 brotli=14185 bytes deferred chunk-dve14t5y.js: identity=97785 gzip=33346 brotli=29511 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes critical chunk-a52hbfka.js: identity=1104 gzip=666 brotli=605 bytes critical chunk-ry6830rs.js: identity=9810 gzip=4018 brotli=3453 bytes onDemand chunk-fghes2yf.js: identity=1649 gzip=773 brotli=675 bytes onDemand chunk-ssp50gsj.js: identity=31924 gzip=12265 brotli=11037 bytes onDemand chunk-p34rqwxp.js: identity=1063 gzip=651 brotli=518 bytes critical chunk-qpch88hg.js: identity=2519 gzip=1007 brotli=878 bytes onDemand chunk-wsv6fedv.js: identity=2462 gzip=1108 brotli=936 bytes onDemand chunk-h9rkbc6w.js: identity=6265 gzip=2102 brotli=1868 bytes onDemand chunk-1r3m5wwf.js: identity=2420 gzip=1199 brotli=1079 bytes critical faulty-terminal.worker.js: identity=1086 gzip=562 brotli=492 bytes critical backdrop.worker.js: identity=243 gzip=210 brotli=159 bytes critical chunk-1bxqtej8.js: identity=16027 gzip=6221 brotli=5542 bytes onDemand chunk-m7dav1as.js: identity=1170 gzip=706 brotli=622 bytes onDemand chunk-2pmt2p2z.js: identity=4640 gzip=1929 brotli=1700 bytes critical chunk-314jazkh.js: identity=42534 gzip=14528 brotli=13001 bytes onDemand chunk-tk41jmaw.js: identity=5359 gzip=2579 brotli=2300 bytes critical chunk-8wn2fegk.js: identity=199 gzip=160 brotli=136 bytes onDemand chunk-gajzyn0r.js: identity=3891 gzip=1737 brotli=1494 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-bbjhz7vm.js: identity=162 gzip=150 brotli=128 bytes onDemand chunk-satkw56a.js: identity=6195 gzip=2790 brotli=2526 bytes onDemand chunk-h58zp44x.js: identity=14531 gzip=5410 brotli=4849 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-efqa19e1.js: identity=707945 gzip=204706 brotli=166113 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-2xv2cxk2.js: identity=540 gzip=350 brotli=311 bytes critical chunk-3st0hg2d.js: identity=5443 gzip=2606 brotli=2385 bytes onDemand chunk-2db7zswa.js: identity=11529 gzip=4653 brotli=4254 bytes onDemand chunk-a7qty13j.js: identity=191 gzip=170 brotli=137 bytes onDemand chunk-4myrwgrb.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-ytpxqt0e.js: identity=2108 gzip=1037 brotli=870 bytes onDemand chunk-f9f8y1s9.js: identity=1026 gzip=621 brotli=496 bytes onDemand chunk-mrdwpq35.js: identity=10693 gzip=4124 brotli=3762 bytes critical chunk-9j95sedx.js: identity=707 gzip=367 brotli=306 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes critical chunk-p938y84p.js: identity=8377 gzip=3575 brotli=3188 bytes critical chunk-45e8w4af.js: identity=21235 gzip=6856 brotli=6137 bytes critical chunk-1y0k7gwq.js: identity=4499 gzip=1858 brotli=1633 bytes onDemand chunk-4dh812dh.js: identity=6357 gzip=2371 brotli=2110 bytes onDemand chunk-wnm5s2jy.js: identity=6772 gzip=3177 brotli=2892 bytes onDemand chunk-1y0q2rjz.js: identity=2824 gzip=1387 brotli=1198 bytes deferred chunk-agwf0tva.js: identity=43046 gzip=16607 brotli=14651 bytes onDemand chunk-hzpqgyzg.js: identity=7662 gzip=3396 brotli=2984 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=111760 gzip=40619 brotli=35252 bytes onDemand chunk-1f4exzmv.js: identity=228 gzip=179 brotli=166 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-b7r2w84k.js: identity=1616 gzip=864 brotli=737 bytes onDemand chunk-6hpmwm51.js: identity=4575 gzip=2015 brotli=1794 bytes critical chunk-e2619ymg.js: identity=17627 gzip=6244 brotli=5561 bytes JavaScript transfer, critical: identity=952686 gzip=295332/307200 brotli=245858/256000 bytes JavaScript transfer, deferred: identity=142372 gzip=50744/51200 brotli=44877/45056 bytes JavaScript transfer, onDemand: identity=191298 gzip=74718/20480 brotli=66509/18432 bytes JavaScript transfer, onDemand largest chunk chunk-40c8whh0.js: gzip=15945/20480 brotli=14185/18432 bytes (class total gzip=74718 brotli=66509, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.08ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.32ms] (pass) subscription not found ends delivery before a late refresh rejection [1.15ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.32ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.16ms] (pass) synchronous subscription refusal releases the transport exactly once [0.09ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [23.86ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.30ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [2.81ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.30ms] (pass) split mux header preserves trailing Close [0.34ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.77ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.10ms] (pass) a newer paged event owns publication before an earlier refresh resumes [8.73ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.76ms] (pass) superseded failure preserves a newer pending refresh [2.75ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [1785.98ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.96ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.80ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [3.87ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.06ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.13ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.35ms] (pass) review continuation stops after forbidden [1.14ms] (pass) review continuation stops after superseded [1.15ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.18ms] (pass) a changed revision discards earlier pages before assembling its restart [0.10ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.16ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.28ms] (pass) watch never publishes a partial page; withdrawn=true [1.24ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.29ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.12ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.32ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.13ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.29ms] 37 pass 0 fail 34463 expect() calls Ran 37 tests across 10 files. [1.91s] ````
kayg commented 2026-10-13 12:14:19 +00:00
Author
Owner
Copy link

Independent replay observation (not yet a confirmed finding), review c2e729b0: 85368c7f in a private exported source root builds x86_64 at 22,580,880 B, 64 B above the recorded 22,580,816 B. ELF accounting differs only in .text (+64 B) and non-file .relro_padding (-64 B); all 110 public outputs match the fresh head. ARM base reproduces exactly at 19,986,840 B. Trust/static/strip checks pass. Evidence: review scratch rebuilt-cuts.json and baseline-section-difference.json. First-cut replay continues; a same-directory head control will determine whether the size gate is affected. No implementation change or severity assigned.

Independent replay observation (not yet a confirmed finding), review c2e729b0: 85368c7f in a private exported source root builds x86_64 at 22,580,880 B, 64 B above the recorded 22,580,816 B. ELF accounting differs only in .text (+64 B) and non-file .relro_padding (-64 B); all 110 public outputs match the fresh head. ARM base reproduces exactly at 19,986,840 B. Trust/static/strip checks pass. Evidence: review scratch rebuilt-cuts.json and baseline-section-difference.json. First-cut replay continues; a same-directory head control will determine whether the size gate is affected. No implementation change or severity assigned.
kayg commented 2026-10-13 12:50:24 +00:00
Author
Owner
Copy link

Verdict: merge. MERGE (no P0/P1). Confirmed findings: P0=0, P1=0, P2=0, P3=0.

Reviewed implementation 88e8a0dad8 against origin/dev merge base 85368c7fdd. Local evidence branch review-size-ratchet head: ed36e82942. Atomic evidence steps: c2e729b0 metadata proof, 00d73d24 checkpoint/control proof, 42b465c4 report/results, and this head's verbatim transcripts. No implementation fix, push, deploy or issue closure.

Fresh head sizes: x86_64 22,204,304 B; aarch64 19,638,744 B, exact caps. Both archives retain 182 public API symbols. 1,025 metadata cases and all 110 public outputs match. Shipping x86_64 restart/credit/snapshot functional tests pass. ARM pre-cut and both first-cut measurements reproduce; exported pre-cut x86 varies +64 text bytes, but the same-directory head control still matches 22,204,304 B and passes the real checker. No current defect was confirmed.

Original-source scripts/verify fast exit 0, no retries or gate waivers. Result summaries total 1,022 passed / 0 failed / 135 existing ignored Rust cases; final protocol suite 37 pass / 0 fail / 34,463 assertions. Runtime timings were not independently remeasured because this brief prohibits the perf VM; retained summary arithmetic is verified. ARM key-memory runtime is explicitly untested on this x86 host.

Verbatim Rust gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

The complete 338,416-byte stdout/stderr is verbatim in docs/verification/size-ratchet-review/verify-fast.log and ten preceding ordered transcript comments; SHA-256 ca6727ff60d0f9e9b9b930e55aba2764b71a293ada1f2464522352c1e1d8aa99. Tool-output trailing whitespace is preserved exactly. Evidence and reviewer checklist: docs/verification/size-ratchet-review/README.md. Private review build targets, exported sources and measured binaries are removed after this record; committed evidence is retained.

Verdict: merge. MERGE (no P0/P1). Confirmed findings: P0=0, P1=0, P2=0, P3=0. Reviewed implementation 88e8a0dad8f865d004986e794ea82bba498959ea against origin/dev merge base 85368c7fdda186fa46b142be4d0546807357247a. Local evidence branch review-size-ratchet head: ed36e829424c973ec566a7981b87e41e076e9d75. Atomic evidence steps: c2e729b0 metadata proof, 00d73d24 checkpoint/control proof, 42b465c4 report/results, and this head's verbatim transcripts. No implementation fix, push, deploy or issue closure. Fresh head sizes: x86_64 22,204,304 B; aarch64 19,638,744 B, exact caps. Both archives retain 182 public API symbols. 1,025 metadata cases and all 110 public outputs match. Shipping x86_64 restart/credit/snapshot functional tests pass. ARM pre-cut and both first-cut measurements reproduce; exported pre-cut x86 varies +64 text bytes, but the same-directory head control still matches 22,204,304 B and passes the real checker. No current defect was confirmed. Original-source scripts/verify fast exit 0, no retries or gate waivers. Result summaries total 1,022 passed / 0 failed / 135 existing ignored Rust cases; final protocol suite 37 pass / 0 fail / 34,463 assertions. Runtime timings were not independently remeasured because this brief prohibits the perf VM; retained summary arithmetic is verified. ARM key-memory runtime is explicitly untested on this x86 host. Verbatim Rust gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` The complete 338,416-byte stdout/stderr is verbatim in docs/verification/size-ratchet-review/verify-fast.log and ten preceding ordered transcript comments; SHA-256 ca6727ff60d0f9e9b9b930e55aba2764b71a293ada1f2464522352c1e1d8aa99. Tool-output trailing whitespace is preserved exactly. Evidence and reviewer checklist: docs/verification/size-ratchet-review/README.md. Private review build targets, exported sources and measured binaries are removed after this record; committed evidence is retained.
kayg commented 2026-10-13 12:51:57 +00:00
Author
Owner
Copy link

Review cleanup complete at local review-size-ratchet head ed36e82942. Private size-ratchet-review build targets, exported checkpoint sources and measured binaries removed. Committed evidence and the original-source fast transcript remain in docs/verification/size-ratchet-review/. Worktree clean; no implementation fix, push, deploy or perf VM use. Verdict remains MERGE (no P0/P1), zero confirmed findings.

Review cleanup complete at local review-size-ratchet head ed36e829424c973ec566a7981b87e41e076e9d75. Private size-ratchet-review build targets, exported checkpoint sources and measured binaries removed. Committed evidence and the original-source fast transcript remain in docs/verification/size-ratchet-review/. Worktree clean; no implementation fix, push, deploy or perf VM use. Verdict remains MERGE (no P0/P1), zero confirmed findings.
kayg commented 2026-10-13 22:54:57 +00:00
Author
Owner
Copy link

Started size-ratchet-r2 on branch size-ratchet-r2 at base 57b0c3ddca (origin/dev); worktree clean. Read all 49 #198 comments and the related #194 record; neither issue names a parent. First step: reproduce the +31,968 B x86_64 / +27,808 B aarch64 mesh-cutoff attribution against 9894aff6 with cargo-bloat and exact static artifacts, then cut under the existing D243 caps before continuing toward production size. No push or deploy until the branch changes are measured and gated.

Started size-ratchet-r2 on branch size-ratchet-r2 at base 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6 (`origin/dev`); worktree clean. Read all 49 #198 comments and the related #194 record; neither issue names a parent. First step: reproduce the +31,968 B x86_64 / +27,808 B aarch64 mesh-cutoff attribution against 9894aff6 with cargo-bloat and exact static artifacts, then cut under the existing D243 caps before continuing toward production size. No push or deploy until the branch changes are measured and gated.
kayg commented 2026-10-13 23:05:11 +00:00
Author
Owner
Copy link

Finding: a fresh stripped static x86_64 build of branch head 57b0c3dd measures 22,275,888 B, +71,584 B above the exact 22,204,304 B cap. This is 39,616 B above the supplied 22,236,272 B dev measurement (+31,968 B); the current head includes later merges after 9894aff6, so the extra delta is being isolated before attributing it. Build used the locked release recipe on infraternal-dev (12 CPUs; load 16.63/11.38/9.22 at start); artifact SHA-256 ffc23151af99d75160042402f1e0876ea13012afc1e71e49a26a0e0534ea6726. Raw build receipt: head-x86-build.log. ARM and crate attribution are pending.

Finding: a fresh stripped static x86_64 build of branch head 57b0c3dd measures 22,275,888 B, +71,584 B above the exact 22,204,304 B cap. This is 39,616 B above the supplied 22,236,272 B dev measurement (+31,968 B); the current head includes later merges after 9894aff6, so the extra delta is being isolated before attributing it. Build used the locked release recipe on infraternal-dev (12 CPUs; load 16.63/11.38/9.22 at start); artifact SHA-256 ffc23151af99d75160042402f1e0876ea13012afc1e71e49a26a0e0534ea6726. Raw build receipt: [head-x86-build.log](https://git.kayg.org/attachments/cc96bfe0-4c48-4c17-9f36-e8abf4513484). ARM and crate attribution are pending.
kayg commented 2026-10-13 23:06:33 +00:00
Author
Owner
Copy link

Finding: the locked release dependency graph does not expose a separable unused OpenSSL feature to drop. openssl-sys is reached through server TLS (axum-server), vendored openssl, remote/agent transport and WebAuthn CA dependencies; removing the provider path would remove shipped server/auth behavior. No provider or feature change is made. Raw cargo tree --edges features --invert openssl-sys output: openssl-feature-graph.txt.

Finding: the locked release dependency graph does not expose a separable unused OpenSSL feature to drop. `openssl-sys` is reached through server TLS (`axum-server`), vendored `openssl`, remote/agent transport and WebAuthn CA dependencies; removing the provider path would remove shipped server/auth behavior. No provider or feature change is made. Raw `cargo tree --edges features --invert openssl-sys` output: [openssl-feature-graph.txt](https://git.kayg.org/attachments/cb66230b-cd1e-426d-a8d0-193c34880255).
kayg commented 2026-10-13 23:33:10 +00:00
Author
Owner
Copy link

Finding: the supplied +32 KB dev overrun comes from mesh-cutoff-fast (#173). I ran the same locked x86_64 release cargo-bloat profile against 8fcf34db (c75 first parent) and c75c362b. infraternal_plugin_mesh grew from 545.1 KiB to 568.8 KiB of .text (~23.7 KiB); the full .text is 16.6 MiB on both rounded tables. The measured stripped artifacts are 22,204,304 B → 22,236,272 B (+31,968 B) x86_64 and 19,638,744 B → 19,666,552 B (+27,808 B) aarch64. This confirms the merge as the cap overrun source; no source changes have been made yet.

Receipts: parent cargo-bloat, merge cargo-bloat, unrounded merge JSON.

Finding: the supplied +32 KB dev overrun comes from mesh-cutoff-fast (#173). I ran the same locked x86_64 release cargo-bloat profile against 8fcf34db (c75 first parent) and c75c362b. `infraternal_plugin_mesh` grew from 545.1 KiB to 568.8 KiB of `.text` (~23.7 KiB); the full `.text` is 16.6 MiB on both rounded tables. The measured stripped artifacts are 22,204,304 B → 22,236,272 B (+31,968 B) x86_64 and 19,638,744 B → 19,666,552 B (+27,808 B) aarch64. This confirms the merge as the cap overrun source; no source changes have been made yet. Receipts: [parent cargo-bloat](https://git.kayg.org/attachments/0dc68cb4-0480-49a0-b385-7d401e1a967a), [merge cargo-bloat](https://git.kayg.org/attachments/e78e3fce-6269-4962-8576-4e1fd3233cc2), [unrounded merge JSON](https://git.kayg.org/attachments/e6f85b3c-56a8-4ec8-94d1-1b1816cf1b0b).
kayg commented 2026-10-13 23:36:51 +00:00
Author
Owner
Copy link

Finding: the unmodified 57b0c3dd x86_64 release artifact (SHA-256 ffc23151af99d75160042402f1e0876ea13012afc1e71e49a26a0e0534ea6726) fails the perf-VM same-session flood budget before any size change. On infraternal-perf-test (4 cores, start load 0.06/0.03/0.19), 100-sample same-session Ack/PTY echo p99 was 597.14/619.26 ms versus baseline PTY echo p99 325.17 ms, growth +294.09 ms against 16.67 ms. Baseline and separate-session flood p99s passed (325.02/325.17 ms and growth −10.60 ms). I’ll retain these as the pre-change comparison and still collect terminal.open.

Receipt: perf-before.log.

Finding: the unmodified 57b0c3dd x86_64 release artifact (SHA-256 ffc23151af99d75160042402f1e0876ea13012afc1e71e49a26a0e0534ea6726) fails the perf-VM same-session flood budget before any size change. On infraternal-perf-test (4 cores, start load 0.06/0.03/0.19), 100-sample same-session Ack/PTY echo p99 was 597.14/619.26 ms versus baseline PTY echo p99 325.17 ms, growth +294.09 ms against 16.67 ms. Baseline and separate-session flood p99s passed (325.02/325.17 ms and growth −10.60 ms). I’ll retain these as the pre-change comparison and still collect terminal.open. Receipt: [perf-before.log](https://git.kayg.org/attachments/f997e3ae-e3a5-4e81-99e3-1f3c7eedf069).
kayg commented 2026-10-14 00:09:46 +00:00
Author
Owner
Copy link

Candidate profile iteration finding: scripts/verify iterate passed fmt, VT native fmt, CLI plugin compile-out, clippy, and cargo-deny. The workspace test row failed: 95 passed, 2 failed, 14 ignored. remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable got Disconnected instead of Fallback at crates/infraternal-agent/src/remote_server_path_tests.rs:657; parked_fallback_recovers_mesh_and_keeps_control_actions_usable timed out at line 813. The change only touches release profile settings. Sequential rechecks are running with the existing scratch target.

Receipt: iterate-cold-profile.log.

Candidate profile iteration finding: `scripts/verify iterate` passed fmt, VT native fmt, CLI plugin compile-out, clippy, and cargo-deny. The workspace test row failed: 95 passed, 2 failed, 14 ignored. `remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable` got `Disconnected` instead of `Fallback` at `crates/infraternal-agent/src/remote_server_path_tests.rs:657`; `parked_fallback_recovers_mesh_and_keeps_control_actions_usable` timed out at line 813. The change only touches release profile settings. Sequential rechecks are running with the existing scratch target. Receipt: [iterate-cold-profile.log](https://git.kayg.org/attachments/34f33f7c-6221-4f67-92d7-b4b7526810b7).
kayg commented 2026-10-14 00:12:48 +00:00
Author
Owner
Copy link

Recheck: CARGO_TARGET_DIR=.../target-iterate cargo test --locked --workspace remote_client::server_path::tests:: -- --nocapture --test-threads=1 executed the full-workspace variants of the two fallback tests that failed in the first iterate run. Result: 10 passed, 0 failed, 1 ignored, 100 filtered out, finished in 3.27 s. The first gate failure was transient; full scripts/verify iterate is being rerun with the warmed target.

Receipt: iterate-fallback-workspace-recheck.log.

Recheck: `CARGO_TARGET_DIR=.../target-iterate cargo test --locked --workspace remote_client::server_path::tests:: -- --nocapture --test-threads=1` executed the full-workspace variants of the two fallback tests that failed in the first iterate run. Result: 10 passed, 0 failed, 1 ignored, 100 filtered out, finished in 3.27 s. The first gate failure was transient; full `scripts/verify iterate` is being rerun with the warmed target. Receipt: [iterate-fallback-workspace-recheck.log](https://git.kayg.org/attachments/5dcb8885-e799-4a0f-84d7-a7f41c344f6b).
kayg commented 2026-10-14 00:27:40 +00:00
Author
Owner
Copy link

Candidate-profile iterate rerun passed on 57b0c3ddca. Full workspace checks completed; TypeScript reported 37 pass, 0 fail, 34,463 expect() calls. The earlier two fallback timeouts did not recur. Raw gate log: iterate-cold-profile-rerun.log.

Candidate-profile iterate rerun passed on 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6. Full workspace checks completed; TypeScript reported 37 pass, 0 fail, 34,463 expect() calls. The earlier two fallback timeouts did not recur. Raw gate log: [iterate-cold-profile-rerun.log](https://git.kayg.org/attachments/dee462b3-c06d-474b-b144-5b3a4bf84094).
kayg commented 2026-10-14 00:43:10 +00:00
Author
Owner
Copy link

Profile candidate performance A/B on the locked 4-vCPU perf VM (CPUWeight=10000). At RTT=0, terminal.open n=300 per run: median p50 was 13,413 µs before and 13,499 µs after; median p95 was 22,175 µs before and 19,063 µs after. p99 varied by run (37,210 µs before; 52,659 µs after) while load rose during one after run, so the tail is inconclusive. At RTT=300 ms, paired n=100 baseline echo p99 was 323.49 ms before and 327.07 ms after (334 ms budget); other-session flood p99 was 297.80/323.70 ms and passed both; same-session flood p99 was 570.84/533.48 ms and failed both. Repeated samples showed high same-session variation, with no consistent regression from the cold plugin profile change. Receipts: before latency, candidate latency, paired terminal.open.

Profile candidate performance A/B on the locked 4-vCPU perf VM (CPUWeight=10000). At RTT=0, terminal.open n=300 per run: median p50 was 13,413 µs before and 13,499 µs after; median p95 was 22,175 µs before and 19,063 µs after. p99 varied by run (37,210 µs before; 52,659 µs after) while load rose during one after run, so the tail is inconclusive. At RTT=300 ms, paired n=100 baseline echo p99 was 323.49 ms before and 327.07 ms after (334 ms budget); other-session flood p99 was 297.80/323.70 ms and passed both; same-session flood p99 was 570.84/533.48 ms and failed both. Repeated samples showed high same-session variation, with no consistent regression from the cold plugin profile change. Receipts: [before latency](https://git.kayg.org/attachments/458e2136-561c-4d0b-ba79-9c6416268626), [candidate latency](https://git.kayg.org/attachments/6acae708-5d8c-4d78-a2d2-da6def98073d), [paired terminal.open](https://git.kayg.org/attachments/6991a7a2-5ca6-41f6-9cd1-d145cab79cef).
kayg commented 2026-10-14 00:51:09 +00:00
Author
Owner
Copy link

First size cut measured on static stripped release artifacts. x86_64: 22,275,888 B base → 22,111,120 B candidate (−164,768 B), now 93,184 B under the existing 22,204,304 B cap. aarch64: 19,704,712 B base → 19,581,800 B candidate (−122,912 B), now 56,944 B under the existing 19,638,744 B cap. The caps are ratcheted to the exact candidate sizes. This keeps all features; only the release and host-facts plugin crates use opt-level s while terminal and mesh data paths retain speed optimization. The x86_64 artifact still needs 1,778,016 B of cuts to reach the 20,333,104 B production target. Receipts: x86 base, x86 candidate, aarch64 base, aarch64 candidate.

First size cut measured on static stripped release artifacts. x86_64: 22,275,888 B base → 22,111,120 B candidate (−164,768 B), now 93,184 B under the existing 22,204,304 B cap. aarch64: 19,704,712 B base → 19,581,800 B candidate (−122,912 B), now 56,944 B under the existing 19,638,744 B cap. The caps are ratcheted to the exact candidate sizes. This keeps all features; only the release and host-facts plugin crates use opt-level s while terminal and mesh data paths retain speed optimization. The x86_64 artifact still needs 1,778,016 B of cuts to reach the 20,333,104 B production target. Receipts: [x86 base](https://git.kayg.org/attachments/6cb0a83-4370-485f-a19f-687108eb486e), [x86 candidate](https://git.kayg.org/attachments/efa1fbb3-af50-4730-91a5-a2f5c01fb640), [aarch64 base](https://git.kayg.org/attachments/79443f69-a6f0-4382-a68f-748e79d499f6), [aarch64 candidate](https://git.kayg.org/attachments/ccdc982e-1a75-44f3-8d18-94cea637f9e7).
kayg commented 2026-10-14 01:05:15 +00:00
Author
Owner
Copy link

Finalized-diff scripts/verify iterate failed in infraternal-server tests: 417 passed, 6 failed, 46 ignored; test runtime 496.82 s. Failures: mesh lifecycle Elapsed(()); pending mesh writers (control_ms=402, pong false); full input writer closed websocket; saturated native control queue completed early; remote renewal publication TLS write failure; renewal identity missing. The build host load reached 18.31 / 22.20 / 21.55 on 12 CPUs during this run. These failures are timing/concurrency sensitive, but I have not attributed them to host load yet. Raw log: iterate-finalized-diff.log. I will rerun the failed rows when load recedes; eligible auth socket timeout failures will also be checked against the detached origin/dev baseline per the gate rule.

Finalized-diff `scripts/verify iterate` failed in `infraternal-server` tests: 417 passed, 6 failed, 46 ignored; test runtime 496.82 s. Failures: mesh lifecycle `Elapsed(())`; pending mesh writers (`control_ms=402`, pong false); full input writer closed websocket; saturated native control queue completed early; remote renewal publication TLS write failure; renewal identity missing. The build host load reached 18.31 / 22.20 / 21.55 on 12 CPUs during this run. These failures are timing/concurrency sensitive, but I have not attributed them to host load yet. Raw log: [iterate-finalized-diff.log](https://git.kayg.org/attachments/3254138b-ff04-4d3c-baae-6ace681089aa). I will rerun the failed rows when load recedes; eligible auth socket timeout failures will also be checked against the detached `origin/dev` baseline per the gate rule.
kayg commented 2026-10-14 01:08:25 +00:00
Author
Owner
Copy link

Isolated reruns on the candidate branch used one test thread under host load ~21.8–22.8. Five of six previously failed rows passed individually, including the mesh lifecycle timeout, authority-pool assertion, control-queue assertion, and both renewal tests. review_full_input_writer_preserves_browser_control_progress still failed at review_input_credit.rs:392 with an absent websocket message; this is the auth socket timeout case eligible for the detached origin/dev comparison. Receipt: isolated reruns.

Isolated reruns on the candidate branch used one test thread under host load ~21.8–22.8. Five of six previously failed rows passed individually, including the mesh lifecycle timeout, authority-pool assertion, control-queue assertion, and both renewal tests. `review_full_input_writer_preserves_browser_control_progress` still failed at `review_input_credit.rs:392` with an absent websocket message; this is the auth socket timeout case eligible for the detached `origin/dev` comparison. Receipt: [isolated reruns](https://git.kayg.org/attachments/0960a50a-cf98-457a-a553-d4d0f1575d34).
kayg commented 2026-10-14 01:14:29 +00:00
Author
Owner
Copy link

The auth socket timeout did not reproduce consistently. The isolated candidate rerun passed (1/1, 0.96 s); the detached origin/dev baseline also passed (1/1, 1.04 s) under load 14.94 / 20.03 / 21.34. All six initially failed rows passed at least one isolated rerun; the first parallel-run failures are not reproducible in the single-row reruns. Receipts: candidate retry, dev baseline. I’ll rerun the full iterate suite with serial test threads to avoid cross-test contention on the shared build host.

The auth socket timeout did not reproduce consistently. The isolated candidate rerun passed (1/1, 0.96 s); the detached `origin/dev` baseline also passed (1/1, 1.04 s) under load 14.94 / 20.03 / 21.34. All six initially failed rows passed at least one isolated rerun; the first parallel-run failures are not reproducible in the single-row reruns. Receipts: [candidate retry](https://git.kayg.org/attachments/1f402a92-c49f-4416-add7-819d623caf65), [dev baseline](https://git.kayg.org/attachments/fa798e52-b986-45fa-81c4-5ed643c0364c). I’ll rerun the full iterate suite with serial test threads to avoid cross-test contention on the shared build host.
kayg commented 2026-10-14 01:46:35 +00:00
Author
Owner
Copy link

The finalized candidate diff passed scripts/verify iterate with RUST_TEST_THREADS=1 to avoid unrelated test contention on the shared host. All Rust test rows passed; TypeScript protocol tests reported 191 pass / 0 fail / 11,387 expectations, and tracer tests reported 37 pass / 0 fail / 34,463 expectations. Gate output: ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done. Raw log: iterate-serial-retry.log.

The finalized candidate diff passed `scripts/verify iterate` with `RUST_TEST_THREADS=1` to avoid unrelated test contention on the shared host. All Rust test rows passed; TypeScript protocol tests reported 191 pass / 0 fail / 11,387 expectations, and tracer tests reported 37 pass / 0 fail / 34,463 expectations. Gate output: `ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done.` Raw log: [iterate-serial-retry.log](https://git.kayg.org/attachments/212c1024-7d75-4f67-bce4-c691ecde2b76).
kayg commented 2026-10-14 01:47:07 +00:00
Author
Owner
Copy link

Committed and pushed c7c52694 to size-ratchet-r2. The commit sets the measured x86_64/aarch64 caps to 22,111,120 B / 19,581,800 B and adds the two cold plugin profile overrides; savings are 164,768 B / 122,912 B. scripts/verify iterate passed with serial test threads. Output: ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done. Receipt: iterate-serial-retry.log.

Committed and pushed `c7c52694` to `size-ratchet-r2`. The commit sets the measured x86_64/aarch64 caps to 22,111,120 B / 19,581,800 B and adds the two cold plugin profile overrides; savings are 164,768 B / 122,912 B. `scripts/verify iterate` passed with serial test threads. Output: `ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done.` Receipt: [iterate-serial-retry.log](https://git.kayg.org/attachments/212c1024-7d75-4f67-bce4-c691ecde2b76).
kayg commented 2026-10-14 01:48:38 +00:00
Author
Owner
Copy link

Next size cut starts at commit c7c52694 (x86_64 22,111,120 B; 1,778,016 B remains to the production target). I’m implementing D264’s targeted removal of OpenSSL AVX-512 AES-GCM code in the static x86_64 build while retaining AES-NI/AVX2 and the AES-GCM functionality; the build-time patch and exact savings will be measured before ratcheting the cap.

Next size cut starts at commit `c7c52694` (x86_64 22,111,120 B; 1,778,016 B remains to the production target). I’m implementing D264’s targeted removal of OpenSSL AVX-512 AES-GCM code in the static x86_64 build while retaining AES-NI/AVX2 and the AES-GCM functionality; the build-time patch and exact savings will be measured before ratcheting the cap.
kayg commented 2026-10-14 02:03:41 +00:00
Author
Owner
Copy link

D264 x86_64 static candidate measured at 21,407,568 B, down 703,552 B from the 22,111,120 B pre-cut artifact. All features remain; the provider dispatch falls back to AES-NI/generic AES-GCM. The patched static libcrypto passed an AES-128-GCM known-vector encrypt/decrypt check. 1,074,464 B remains to the 20,333,104 B production target. Receipts: D264 x86 build, AES-GCM test.

D264 x86_64 static candidate measured at 21,407,568 B, down 703,552 B from the 22,111,120 B pre-cut artifact. All features remain; the provider dispatch falls back to AES-NI/generic AES-GCM. The patched static libcrypto passed an AES-128-GCM known-vector encrypt/decrypt check. 1,074,464 B remains to the 20,333,104 B production target. Receipts: [D264 x86 build](https://git.kayg.org/attachments/3d7c1f78-ce8f-47c7-bdd2-779a095084e1), [AES-GCM test](https://git.kayg.org/attachments/77c214fe-86c2-4725-8298-9bb6abaaaabe).
kayg commented 2026-10-14 02:15:07 +00:00
Author
Owner
Copy link

D264 perf comparison completed on the 4-vCPU perf VM (Intel i9-9900K; AES-NI/AVX2 present, AVX-512 absent). All runs used systemd-run --user --scope -p CPUWeight=10000.

  • terminal.open, n=300: before 22,111,120 B, p50/p95/p99 23,773.3/63,163.1/131,590.3 us; after 21,407,568 B, 16,433.6/48,326.9/69,562.7 us.
  • Echo, n=100: before confirmed p50/p99 300.47/322.21 ms and PTY 300.56/322.22 ms; after confirmed 300.64/325.38 ms and PTY 300.74/325.40 ms. Other-session flood p99 was 320.44/320.45 ms before and 321.65/321.66 ms after. All four echo metrics and isolation checks passed their budgets.
  • The standard baseline harness stalled in its same-session flood phase for 5m29s; I stopped only that run by PID after it stopped emitting metrics. The attached log records the completed ordinary and other-session metrics and stop note. Prior full paired runs of this profile showed the same-session case failing on both sides; this D264 comparison makes no new claim for that case.

Receipts: terminal open before, terminal open after, echo baseline, echo candidate, perf VM CPU features.

D264 perf comparison completed on the 4-vCPU perf VM (Intel i9-9900K; AES-NI/AVX2 present, AVX-512 absent). All runs used `systemd-run --user --scope -p CPUWeight=10000`. - `terminal.open`, n=300: before 22,111,120 B, p50/p95/p99 23,773.3/63,163.1/131,590.3 us; after 21,407,568 B, 16,433.6/48,326.9/69,562.7 us. - Echo, n=100: before confirmed p50/p99 300.47/322.21 ms and PTY 300.56/322.22 ms; after confirmed 300.64/325.38 ms and PTY 300.74/325.40 ms. Other-session flood p99 was 320.44/320.45 ms before and 321.65/321.66 ms after. All four echo metrics and isolation checks passed their budgets. - The standard baseline harness stalled in its same-session flood phase for 5m29s; I stopped only that run by PID after it stopped emitting metrics. The attached log records the completed ordinary and other-session metrics and stop note. Prior full paired runs of this profile showed the same-session case failing on both sides; this D264 comparison makes no new claim for that case. Receipts: [terminal open before](https://git.kayg.org/attachments/8a68b6a1-3920-425b-a8db-e9bbb626f056), [terminal open after](https://git.kayg.org/attachments/d0e1798f-9642-4249-9be6-a0541b2887e1), [echo baseline](https://git.kayg.org/attachments/9e1f037e-0085-44db-bbcd-8e4b5d9097dd), [echo candidate](https://git.kayg.org/attachments/4108293b-64c2-43f2-8f7e-dff26c541f03), [perf VM CPU features](https://git.kayg.org/attachments/3eec9592-ce37-41fa-8216-33e1ea4bea57).
kayg commented 2026-10-14 02:40:34 +00:00
Author
Owner
Copy link

The first serial iterate reached the Rust test row, but four mesh node_state tests failed when their helper tried to create a directory below the package-root target/ path (node_state.rs:165, ENOENT). The gate invocation had no CARGO_TARGET_DIR in its environment. Running the same four tests with CARGO_TARGET_DIR set to the absolute worktree target passed 4/4. I’m rerunning the complete iterate gate with that environment; no product test code changed.

Receipts: failed iterate log, node state rerun.

The first serial iterate reached the Rust test row, but four mesh `node_state` tests failed when their helper tried to create a directory below the package-root `target/` path (`node_state.rs:165`, `ENOENT`). The gate invocation had no `CARGO_TARGET_DIR` in its environment. Running the same four tests with `CARGO_TARGET_DIR` set to the absolute worktree target passed 4/4. I’m rerunning the complete iterate gate with that environment; no product test code changed. Receipts: [failed iterate log](https://git.kayg.org/attachments/d4d1e3df-6f61-49ba-b8df-396c103b1de5), [node state rerun](https://git.kayg.org/attachments/a4af54c1-d230-425e-ae5c-09d100d32713).
kayg commented 2026-10-14 02:41:27 +00:00
Author
Owner
Copy link

The full iterate retry with absolute CARGO_TARGET_DIR stopped at the 3-sample latency-proxy self-check before Rust gates: p50 328.14 ms / p99 377.37 ms. The host load was 23.45 / 20.52 / 21.26 shortly afterward. An isolated retry passed at p50 312.75 ms / p99 322.56 ms. I’ll rerun the full gate after shared host load eases.

Receipts: full iterate attempt, isolated self-check retry.

The full iterate retry with absolute `CARGO_TARGET_DIR` stopped at the 3-sample latency-proxy self-check before Rust gates: p50 328.14 ms / p99 377.37 ms. The host load was 23.45 / 20.52 / 21.26 shortly afterward. An isolated retry passed at p50 312.75 ms / p99 322.56 ms. I’ll rerun the full gate after shared host load eases. Receipts: [full iterate attempt](https://git.kayg.org/attachments/1ecd15d2-7e93-4999-8cb1-025c6b09ce3a), [isolated self-check retry](https://git.kayg.org/attachments/53f986bf-455b-42a4-bf2f-8cdcd0811653).
kayg commented 2026-10-14 03:07:39 +00:00
Author
Owner
Copy link

The full iterate run with absolute CARGO_TARGET_DIR completed the workspace tests with 421 passed, 2 failed, 46 ignored. The failures were saturated_native_control_queue_does_not_hide_primary_terminal_output and failed_publication_retains_original_admission_without_interrupting_terminal. The control-queue test passed when rerun alone from the exact workspace test binary (1/1). The renewal-ack test failed alone while the host load was 54.47 / 44.26 / 31.12; its peer reader closed before the expected application frame. The same test had a TLS write error in the full run. I’m rerunning the renewal-ack test after host load eases, then I’ll rerun the full gate; neither failure is being waived as a baseline exception.

Receipts: full iterate run, control-queue rerun, renewal-ack rerun.

The full iterate run with absolute `CARGO_TARGET_DIR` completed the workspace tests with 421 passed, 2 failed, 46 ignored. The failures were `saturated_native_control_queue_does_not_hide_primary_terminal_output` and `failed_publication_retains_original_admission_without_interrupting_terminal`. The control-queue test passed when rerun alone from the exact workspace test binary (1/1). The renewal-ack test failed alone while the host load was 54.47 / 44.26 / 31.12; its peer reader closed before the expected application frame. The same test had a TLS write error in the full run. I’m rerunning the renewal-ack test after host load eases, then I’ll rerun the full gate; neither failure is being waived as a baseline exception. Receipts: [full iterate run](https://git.kayg.org/attachments/b16c2c60-63f3-4dcb-83d3-3c96b854eb01), [control-queue rerun](https://git.kayg.org/attachments/840eaf50-1805-4c2e-be89-6280a6570b97), [renewal-ack rerun](https://git.kayg.org/attachments/97a8f0a4-c7d0-4b66-8423-2c0e3089bcf1).
kayg commented 2026-10-14 03:14:21 +00:00
Author
Owner
Copy link

The host remains under heavy concurrent load; the latest load averages are 76.32 / 65.95 / 46.91. The exact renewal-ack test and full iterate gate remain pending a reliable rerun. No owner input is needed; I’ll retry when host load eases.

Receipt: host load.

The host remains under heavy concurrent load; the latest load averages are 76.32 / 65.95 / 46.91. The exact renewal-ack test and full iterate gate remain pending a reliable rerun. No owner input is needed; I’ll retry when host load eases. Receipt: [host load](https://git.kayg.org/attachments/2e4a8c71-6a11-43fe-945b-ea650df4b75b).
kayg commented 2026-10-14 03:21:11 +00:00
Author
Owner
Copy link

The shared host has not eased; current averages are 86.54 / 80.73 / 60.97. I have not repeated the timing-sensitive renewal-ack test under this load. The next actions remain the isolated renewal rerun and full iterate gate when scheduling is reliable.

Receipt: current host load.

The shared host has not eased; current averages are 86.54 / 80.73 / 60.97. I have not repeated the timing-sensitive renewal-ack test under this load. The next actions remain the isolated renewal rerun and full iterate gate when scheduling is reliable. Receipt: [current host load](https://git.kayg.org/attachments/31d4b190-6648-411e-a970-8220579d0d56).
kayg commented 2026-10-14 03:25:23 +00:00
Author
Owner
Copy link

The isolated failed_publication_retains_original_admission_without_interrupting_terminal rerun still failed: the peer reader closed before the expected frame (remote_renewal_ack_tests.rs:36) after 5.62 s. Host load at completion was 64.02 / 76.91 / 64.74. This remains a gate failure, not a baseline waiver. I’ll retry once host load falls further, then rerun the full iterate gate.

Receipt: renewal-ack retry.

The isolated `failed_publication_retains_original_admission_without_interrupting_terminal` rerun still failed: the peer reader closed before the expected frame (`remote_renewal_ack_tests.rs:36`) after 5.62 s. Host load at completion was 64.02 / 76.91 / 64.74. This remains a gate failure, not a baseline waiver. I’ll retry once host load falls further, then rerun the full iterate gate. Receipt: [renewal-ack retry](https://git.kayg.org/attachments/301a7139-8b58-435c-81a0-4c7e65a7469d).
kayg commented 2026-10-14 03:31:40 +00:00
Author
Owner
Copy link

The latest full iterate attempt again stopped at the initial 3-sample latency-proxy check after release tests: p50 341.77 ms / p99 405.24 ms. An isolated self-test passed shortly before it at 305.61 / 341.87 ms. This remains a failed gate; I’ll retry when the host is more stable.

Receipts: full iterate attempt, isolated proxy check.

The latest full iterate attempt again stopped at the initial 3-sample latency-proxy check after release tests: p50 341.77 ms / p99 405.24 ms. An isolated self-test passed shortly before it at 305.61 / 341.87 ms. This remains a failed gate; I’ll retry when the host is more stable. Receipts: [full iterate attempt](https://git.kayg.org/attachments/2fdfe34f-08df-4b1a-9bbc-8ba412382dc0), [isolated proxy check](https://git.kayg.org/attachments/c2273319-c160-421c-b387-e5a490597693).
kayg commented 2026-10-14 03:55:42 +00:00
Author
Owner
Copy link

D264 gate step complete at candidate worktree head c7c52694 (D264 changes uncommitted). The CPU-weighted scripts/verify iterate run completed successfully. The x86_64 candidate is 21,407,568 B, 703,552 B below the prior 22,111,120 B cap; remaining gap to production is 1,074,464 B. Full raw log: d264-iterate-weighted.log. Gate output, verbatim:

ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done.
D264 gate step complete at candidate worktree head c7c52694 (D264 changes uncommitted). The CPU-weighted `scripts/verify iterate` run completed successfully. The x86_64 candidate is 21,407,568 B, 703,552 B below the prior 22,111,120 B cap; remaining gap to production is 1,074,464 B. Full raw log: [d264-iterate-weighted.log](https://git.kayg.org/attachments/2e7d3b11-3173-4990-baa7-d82097376e04). Gate output, verbatim: ``` ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done. ```
kayg commented 2026-10-14 03:58:20 +00:00
Author
Owner
Copy link

D264 committed and pushed to size-ratchet-r2: 357f321f (Cut unused AVX-512 AES-GCM from x86 release). The x86_64 exact cap is 21,407,568 B; cut from the preceding 22,111,120 B candidate: 703,552 B. The weighted iterate gate passed (full log attached in the prior comment). A separate commit-hook proxy self-test reported p50 499.39 ms / p99 784.35 ms under shared load; an isolated CPU-weighted rerun passed at p50 305.08 ms / p99 328.15 ms, n=31: raw output. Exact rerun output:

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=31 p50_ms=305.08 p99_ms=328.15 result=PASS
D264 committed and pushed to `size-ratchet-r2`: `357f321f` (`Cut unused AVX-512 AES-GCM from x86 release`). The x86_64 exact cap is 21,407,568 B; cut from the preceding 22,111,120 B candidate: 703,552 B. The weighted iterate gate passed (full log attached in the prior comment). A separate commit-hook proxy self-test reported p50 499.39 ms / p99 784.35 ms under shared load; an isolated CPU-weighted rerun passed at p50 305.08 ms / p99 328.15 ms, n=31: [raw output](https://git.kayg.org/attachments/d3226227-0850-4168-8c07-fa3d70ff8f3d). Exact rerun output: ``` METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=31 p50_ms=305.08 p99_ms=328.15 result=PASS ```
kayg commented 2026-10-14 04:16:08 +00:00
Author
Owner
Copy link

D264 size-attribution finding at commit 357f321f: cargo-bloat on the x86_64 release reports 15.6 MiB .text, including 2.5 MiB infraternal_server, 557.7 KiB infraternal_plugin_mesh, 457.2 KiB infraternal_agent, and 363.6 KiB root infraternal; 3.3 MiB maps to native/unattributed symbols. The function report identifies a 71.6 KiB mesh execute closure, 33.5 KiB agent channel closure, and 37.6 KiB root invocation function. These are approximate LTO symbol attributions. Logs: crate table, largest functions. The diagnostic rebuilt an unstripped binary (56.7 MiB); the shipping stripped artifact remains governed by the exact gate measurement of 21,407,568 B.

D264 size-attribution finding at commit 357f321f: `cargo-bloat` on the x86_64 release reports 15.6 MiB `.text`, including 2.5 MiB `infraternal_server`, 557.7 KiB `infraternal_plugin_mesh`, 457.2 KiB `infraternal_agent`, and 363.6 KiB root `infraternal`; 3.3 MiB maps to native/unattributed symbols. The function report identifies a 71.6 KiB mesh execute closure, 33.5 KiB agent channel closure, and 37.6 KiB root invocation function. These are approximate LTO symbol attributions. Logs: [crate table](https://git.kayg.org/attachments/c8c627c9-375b-498b-a8db-bb9549893cd5), [largest functions](https://git.kayg.org/attachments/9766cd55-61ae-478c-a260-ca4db1c354a1). The diagnostic rebuilt an unstripped binary (56.7 MiB); the shipping stripped artifact remains governed by the exact gate measurement of 21,407,568 B.
kayg commented 2026-10-14 04:26:29 +00:00
Author
Owner
Copy link

Size experiment at 357f321f: LLD --icf=safe produced a 21,402,896 B x86_64 static binary, saving 4,672 B (0.02%) from the 21,407,568 B baseline. The linker conservatively skipped native archive objects whose ADDRSIG sections lack a valid link. This does not materially advance the 1,074,464 B production gap, so no linker setting will be retained. Build log: candidate output.

Size experiment at 357f321f: LLD `--icf=safe` produced a 21,402,896 B x86_64 static binary, saving 4,672 B (0.02%) from the 21,407,568 B baseline. The linker conservatively skipped native archive objects whose ADDRSIG sections lack a valid link. This does not materially advance the 1,074,464 B production gap, so no linker setting will be retained. Build log: [candidate output](https://git.kayg.org/attachments/4fad7f10-8697-407d-9b77-847ef78c4f42).
kayg commented 2026-10-14 05:22:49 +00:00
Author
Owner
Copy link

D265 finding: the clean x86_64 CLI opt-level candidate (24,467,728 B, SHA-256 4ef9deca1045952424ea059a30b505738c73db25fc3325ea715ae614fe9ddd84) fails the real terminal.open protocol fixture on its first request with terminal unavailable / invalid. The D264 binary completed n=300 opens (p50 57,354.8 us; p99 98,600.7 us) in the same perf VM window. No candidate timing was produced because the protocol request failed. Raw receipts: baseline, candidate failure, clean build. The package opt-level change is not shippable as-is.

D265 finding: the clean x86_64 CLI opt-level candidate (24,467,728 B, SHA-256 `4ef9deca1045952424ea059a30b505738c73db25fc3325ea715ae614fe9ddd84`) fails the real `terminal.open` protocol fixture on its first request with `terminal unavailable / invalid`. The D264 binary completed n=300 opens (p50 57,354.8 us; p99 98,600.7 us) in the same perf VM window. No candidate timing was produced because the protocol request failed. Raw receipts: [baseline](https://git.kayg.org/attachments/80eac205-ab73-4520-9959-9d758e1d6510), [candidate failure](https://git.kayg.org/attachments/725f5aeb-549a-4fb0-a1df-660b96ad5e38), [clean build](https://git.kayg.org/attachments/bc1789e4-6153-49d0-8fa0-f16843b9772f). The package opt-level change is not shippable as-is.
kayg commented 2026-10-14 05:48:05 +00:00
Author
Owner
Copy link

D265 isolated clap_builder opt-level s finding: x86_64 size fell from 21,407,568 B to 21,329,360 B (−78,208 B), but the real terminal.open fixture failed on the first request with terminal unavailable / invalid. The D264 baseline passed n=300 (p50 52,377.9 us; p99 93,637.9 us). Candidate --help and skill status --json smoke commands passed, but the protocol regression makes this profile change unusable. Receipts: build, help, skill status, baseline protocol run, candidate failure. No cap change is proposed for this candidate.

D265 isolated `clap_builder` opt-level `s` finding: x86_64 size fell from 21,407,568 B to 21,329,360 B (−78,208 B), but the real `terminal.open` fixture failed on the first request with `terminal unavailable / invalid`. The D264 baseline passed n=300 (p50 52,377.9 us; p99 93,637.9 us). Candidate `--help` and `skill status --json` smoke commands passed, but the protocol regression makes this profile change unusable. Receipts: [build](https://git.kayg.org/attachments/3f799850-8cb4-4776-8c50-8261bf3e57a6), [help](https://git.kayg.org/attachments/d7573198-bed9-4b4b-93dd-ef337c7881da), [skill status](https://git.kayg.org/attachments/903cb859-a2cd-4dce-a03e-736f3627aff1), [baseline protocol run](https://git.kayg.org/attachments/e28f3e0b-6f09-4b90-99bc-fc585e2339ba), [candidate failure](https://git.kayg.org/attachments/99d5ee64-e08a-43e6-87f2-55c5f25afdfc). No cap change is proposed for this candidate.
kayg commented 2026-10-14 06:35:05 +00:00
Author
Owner
Copy link

scripts/verify iterate stopped before the Rust gates at the configured latency-proxy self-test: 300 ms RTT expected, p50 323.17 ms and p99 507.13 ms, build-host load 44.50 / 45.97 / 48.05. The repository artifact gate, release functional checks (15 Python tests and 3 TypeScript tests), and the proxy self-test's 3 Bun tests passed first. This is not one of the documented #118 host-load exception rows; rerunning the iterate gate when host load is lower. Raw log: iterate attempt.

` scripts/verify iterate` stopped before the Rust gates at the configured latency-proxy self-test: 300 ms RTT expected, p50 323.17 ms and p99 507.13 ms, build-host load 44.50 / 45.97 / 48.05. The repository artifact gate, release functional checks (15 Python tests and 3 TypeScript tests), and the proxy self-test's 3 Bun tests passed first. This is not one of the documented #118 host-load exception rows; rerunning the iterate gate when host load is lower. Raw log: [iterate attempt](https://git.kayg.org/attachments/c9723d4a-05ad-472b-aba1-48c7fbd4add1).
kayg commented 2026-10-14 06:44:49 +00:00
Author
Owner
Copy link

Axum feature-prune candidate saves 9,984 B (21,397,584 B), but terminal.open failed with terminal unavailable / invalid at perf-VM load 3.96/3.67/5.99. D264 passed the same n=300 real-protocol probe at load 12.14/5.01/5.21 (p50 53,267.1 us, p95 79,474.6 us, p99 90,805.5 us); it also passed at load 19.46/16.63/10.74. Receipts: candidate, D264 high-load control, D264 lower-load control. I’m rebuilding the feature-prune candidate from a clean target before deciding whether to discard it.

Axum feature-prune candidate saves 9,984 B (21,397,584 B), but `terminal.open` failed with `terminal unavailable / invalid` at perf-VM load 3.96/3.67/5.99. D264 passed the same n=300 real-protocol probe at load 12.14/5.01/5.21 (p50 53,267.1 us, p95 79,474.6 us, p99 90,805.5 us); it also passed at load 19.46/16.63/10.74. Receipts: [candidate](https://git.kayg.org/attachments/bb5dc7b1-1119-48d5-bbf31-dd7172e10800), [D264 high-load control](https://git.kayg.org/attachments/54e03932-35da-4da9-b478-f80bca6ae602), [D264 lower-load control](https://git.kayg.org/attachments/1819d946-7c1a-4669-b1fe-08d7829be5a8). I’m rebuilding the feature-prune candidate from a clean target before deciding whether to discard it.
kayg commented 2026-10-14 06:44:57 +00:00
Author
Owner
Copy link

Correction: the attachment links in my previous comment had two transcription errors. Correct links: candidate, D264 high-load control, D264 lower-load control.

Correction: the attachment links in my previous comment had two transcription errors. Correct links: [candidate](https://git.kayg.org/attachments/bb5dc7b1-1119-48d5-bf31-dd7172e10800), [D264 high-load control](https://git.kayg.org/attachments/54e03932-35da-4b09-a478-f80bca6ae602), [D264 lower-load control](https://git.kayg.org/attachments/1819d946-7c1a-4669-b1fe-08d7829be5a8).
kayg commented 2026-10-14 08:07:08 +00:00
Author
Owner
Copy link

Clean-target Axum-prune build passed: 21,397,584 B (9,984 B below D264), SHA-256 9b829137b8585d2aec5346076ccb4b6500562f6ad9f046b7020c57e3ecf5ccb2; static PIE, stripped, no PT_INTERP; --help and skill status --json smoke passed. Receipts: build, artifact and smoke. The n=300 terminal-open perf-VM run is queued behind the shared measurement lock; no cap change yet.

Clean-target Axum-prune build passed: 21,397,584 B (9,984 B below D264), SHA-256 `9b829137b8585d2aec5346076ccb4b6500562f6ad9f046b7020c57e3ecf5ccb2`; static PIE, stripped, no PT_INTERP; `--help` and `skill status --json` smoke passed. Receipts: [build](https://git.kayg.org/attachments/d3619bf5-e9f5-4043-b751-03ea596163e7), [artifact and smoke](https://git.kayg.org/attachments/f3bcf453-d733-4b6a-8070-a2686958181a). The n=300 terminal-open perf-VM run is queued behind the shared measurement lock; no cap change yet.
kayg commented 2026-10-14 08:15:35 +00:00
Author
Owner
Copy link

Feature-graph receipt attached: the candidate retains Axum HTTP/1, JSON, Tokio, tower-log, tracing, and WebSocket features. The only removed Axum defaults are form, query, matched-path, and original-URI extractors; source search found no uses of those extractors.

feature graph

Feature-graph receipt attached: the candidate retains Axum HTTP/1, JSON, Tokio, tower-log, tracing, and WebSocket features. The only removed Axum defaults are form, query, matched-path, and original-URI extractors; source search found no uses of those extractors. [feature graph](https://git.kayg.org/attachments/9b388998-8197-4b1c-bf95-2e2fa51fbb8b)
kayg commented 2026-10-15 02:16:11 +00:00
Author
Owner
Copy link

Resuming #198 on branch size-ratchet-r2, head 357f321fdc, based on dev 57b0c3ddca (the recorded branch base; origin/dev has since advanced). Issue history records no parent issue. The worktree contains the pending Axum feature-prune candidate in Cargo.toml and Cargo.lock. I’m completing its perf-VM protocol comparison before deciding whether it can be committed.

Resuming #198 on branch size-ratchet-r2, head 357f321fdc7d8e0d2691753280d19d81800e76ec, based on dev 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6 (the recorded branch base; origin/dev has since advanced). Issue history records no parent issue. The worktree contains the pending Axum feature-prune candidate in Cargo.toml and Cargo.lock. I’m completing its perf-VM protocol comparison before deciding whether it can be committed.
kayg commented 2026-10-15 02:37:15 +00:00
Author
Owner
Copy link

Finding: a fresh CARGO_TARGET_DIR release build of the pending Axum feature-prune candidate measures 21,397,584 B x86_64, saving 9,984 B from D264’s 21,407,568 B. The artifact is stripped static PIE with no PT_INTERP; production-trust and the 8 MiB key-memory check pass. SHA-256: 9ee937825a355ed5ba78b88a8e26d587dca55586c8e5cfa101c2639fbe5bd74e. cargo tree --locked -e features confirms Axum retains http1/json/tokio/tower-log/tracing/ws; repository search finds no use of the removed Form, Query, MatchedPath or OriginalUri extractors. Build log: axum-clean-build.log. Perf-VM real-protocol comparison is still queued; no cap change or commit yet.

Finding: a fresh CARGO_TARGET_DIR release build of the pending Axum feature-prune candidate measures 21,397,584 B x86_64, saving 9,984 B from D264’s 21,407,568 B. The artifact is stripped static PIE with no PT_INTERP; production-trust and the 8 MiB key-memory check pass. SHA-256: 9ee937825a355ed5ba78b88a8e26d587dca55586c8e5cfa101c2639fbe5bd74e. `cargo tree --locked -e features` confirms Axum retains http1/json/tokio/tower-log/tracing/ws; repository search finds no use of the removed Form, Query, MatchedPath or OriginalUri extractors. Build log: [axum-clean-build.log](https://git.kayg.org/attachments/54b42952-258b-4d35-84d8-f91ed9c28f74). Perf-VM real-protocol comparison is still queued; no cap change or commit yet.
kayg commented 2026-10-15 02:50:41 +00:00
Author
Owner
Copy link

Finding: the freshly rebuilt clean candidate (SHA-256 9ee937825a355ed5ba78b88a8e26d587dca55586c8e5cfa101c2639fbe5bd74e) passes the build-host functional real-agent fixture: terminal.open/type/output/exit passes, and all 24 abrupt-stop/replay cases pass over 4,710,396 payload bytes. This functional mode emits no timing metrics. The prior perf-VM refusal was from the earlier candidate artifact; the new artifact’s perf-VM comparison remains queued. Receipt: agent-functional.log.

Finding: the freshly rebuilt clean candidate (SHA-256 9ee937825a355ed5ba78b88a8e26d587dca55586c8e5cfa101c2639fbe5bd74e) passes the build-host functional real-agent fixture: terminal.open/type/output/exit passes, and all 24 abrupt-stop/replay cases pass over 4,710,396 payload bytes. This functional mode emits no timing metrics. The prior perf-VM refusal was from the earlier candidate artifact; the new artifact’s perf-VM comparison remains queued. Receipt: [agent-functional.log](https://git.kayg.org/attachments/6c29cd9a-0427-47a1-99ee-5d14cf4dbfe4).
kayg commented 2026-10-15 03:30:25 +00:00
Author
Owner
Copy link

D265 control measurement on infraternal-perf-test, 4 vCPU, under the weighted scope: terminal open over 100 real-agent protocol samples measured p50 20.675 ms, p95 47.255 ms, p99 59.119 ms; load average was 3.30 at start and 3.20 at end. Control log: open-d264-control.log. Candidate measurement is queued on the same lock.

D265 control measurement on `infraternal-perf-test`, 4 vCPU, under the weighted scope: terminal open over 100 real-agent protocol samples measured p50 20.675 ms, p95 47.255 ms, p99 59.119 ms; load average was 3.30 at start and 3.20 at end. Control log: [open-d264-control.log](https://git.kayg.org/attachments/6c5a9396-ea4d-4812-b041-f9b591e0e3a6). Candidate measurement is queued on the same lock.
kayg commented 2026-10-15 03:31:58 +00:00
Author
Owner
Copy link

The Axum candidate iterate run passed fmt, CLI plugin compile-out, clippy, and all Rust tests (server: 423 passed; shim: 80 passed). cargo deny reports four advisories for rustls 0.23.45 (RUSTSEC-2026-0346 through -0349); this lane base predates the patch already present on origin/dev (0.23.46). I will update that lock entry in a separate security commit. Full transcript: iterate-axum-candidate.log.

The Axum candidate iterate run passed fmt, CLI plugin compile-out, clippy, and all Rust tests (server: 423 passed; shim: 80 passed). `cargo deny` reports four advisories for rustls 0.23.45 (RUSTSEC-2026-0346 through -0349); this lane base predates the patch already present on `origin/dev` (0.23.46). I will update that lock entry in a separate security commit. Full transcript: [iterate-axum-candidate.log](https://git.kayg.org/attachments/c53a7514-c8d8-4830-a10a-04c42a514d7f).
kayg commented 2026-10-15 03:39:02 +00:00
Author
Owner
Copy link

The lockfile now selects rustls 0.23.46, matching current dev; cargo deny check passes (advisories ok, bans ok, licenses ok, sources ok). This is a patch update of the existing transport stack (D176), separate from the Axum feature removal. cargo-deny-rustls046.log

The lockfile now selects rustls 0.23.46, matching current `dev`; `cargo deny check` passes (`advisories ok, bans ok, licenses ok, sources ok`). This is a patch update of the existing transport stack (D176), separate from the Axum feature removal. [cargo-deny-rustls046.log](https://git.kayg.org/attachments/719f4eb5-e4b9-4088-a019-ec4440297861)
kayg commented 2026-10-15 03:39:40 +00:00
Author
Owner
Copy link

Committed the separate security patch as 097128c4 (rustls 0.23.45 → 0.23.46). cargo deny check passes: advisories, bans, licenses and sources all ok. Transcript: cargo-deny-rustls046.log.

Committed the separate security patch as `097128c4` (rustls 0.23.45 → 0.23.46). `cargo deny check` passes: advisories, bans, licenses and sources all ok. Transcript: [cargo-deny-rustls046.log](https://git.kayg.org/attachments/719f4eb5-e4b9-4088-a019-ec4440297861).
kayg commented 2026-10-15 04:06:11 +00:00
Author
Owner
Copy link

Release cargo bloat --crates on the Axum candidate reports .text 15.6 MiB; attribution: server 2.5 MiB, OpenSSL C 1.2 MiB, plugin-mesh 557.7 KiB, agent 457.2 KiB, infraternal 363.6 KiB, Rustls 354.0 KiB, and 3.3 MiB unknown/native. The bloat artifact retains symbols (56.7 MiB file) and is attribution only, not the shipping size. Transcript: bloat-axum-x86-crates.log.

Release `cargo bloat --crates` on the Axum candidate reports `.text` 15.6 MiB; attribution: server 2.5 MiB, OpenSSL C 1.2 MiB, plugin-mesh 557.7 KiB, agent 457.2 KiB, `infraternal` 363.6 KiB, Rustls 354.0 KiB, and 3.3 MiB unknown/native. The bloat artifact retains symbols (56.7 MiB file) and is attribution only, not the shipping size. Transcript: [bloat-axum-x86-crates.log](https://git.kayg.org/attachments/7aeb185f-0bed-46da-97f4-eb3b535caf3e).
kayg commented 2026-10-15 04:11:54 +00:00
Author
Owner
Copy link

The first perf VM run for axum-clean-rebuilt failed before timing: the real agent protocol returned terminal unavailable, reason invalid (load 0.44 at start). The same x86 artifact passed the local functional agent fixture. I’m inspecting the perf harness state/request and will not treat this as a pass. open-axum-clean-rebuilt-failure.log

The first perf VM run for `axum-clean-rebuilt` failed before timing: the real agent protocol returned `terminal unavailable`, reason `invalid` (load 0.44 at start). The same x86 artifact passed the local functional agent fixture. I’m inspecting the perf harness state/request and will not treat this as a pass. [open-axum-clean-rebuilt-failure.log](https://git.kayg.org/attachments/55458872-2a59-4409-9c4e-af3925731531)
kayg commented 2026-10-15 04:13:52 +00:00
Author
Owner
Copy link

Resolved the failed VM attempt: the fixture appends /sessions/<32 hex>.sock and .upstream to each state path, both of which must be under the 108-byte AF_UNIX limit (harness/scripts/agent_fixture.py:41-55). The long label produced 112/116 bytes; short label q produces 95/99 bytes. The candidate rerun uses q; no binary source changed for this correction. open-state-path-lengths.txt

Resolved the failed VM attempt: the fixture appends `/sessions/<32 hex>.sock` and `.upstream` to each state path, both of which must be under the 108-byte AF_UNIX limit (`harness/scripts/agent_fixture.py:41-55`). The long label produced 112/116 bytes; short label `q` produces 95/99 bytes. The candidate rerun uses `q`; no binary source changed for this correction. [open-state-path-lengths.txt](https://git.kayg.org/attachments/7116e008-ba56-4615-acb4-807e21ceb8a6)
kayg commented 2026-10-15 04:15:21 +00:00
Author
Owner
Copy link

Clean x86_64 release candidate (Rustls 0.23.46 plus Axum extractor feature prune): 21,403,120 B, 4,448 B under the existing 21,407,568 B cap; remaining gap to production’s 20,333,104 B is 1,070,016 B. Production-trust and 8 MiB key-memory checks pass. AArch64 size is building. Receipts: size and trust checks, build log.

Clean x86_64 release candidate (Rustls 0.23.46 plus Axum extractor feature prune): 21,403,120 B, 4,448 B under the existing 21,407,568 B cap; remaining gap to production’s 20,333,104 B is 1,070,016 B. Production-trust and 8 MiB key-memory checks pass. AArch64 size is building. Receipts: [size and trust checks](https://git.kayg.org/attachments/e2a74ec0-bdb1-4863-a492-87d8cd6410ae), [build log](https://git.kayg.org/attachments/133c5dbb-d17f-4425-8c2b-df415400e4ef).
kayg commented 2026-10-15 04:21:35 +00:00
Author
Owner
Copy link

Function-level .text attribution shows the largest actionable bodies: auth::http::execute 88.5 KiB, runtime::build_router_core 81.4 KiB, MeshService::execute 71.6 KiB, runtime::remote_router 57.0 KiB, embedded::run_actor 48.9 KiB and bootstrap_api::run 41.7 KiB. These server and mesh paths need measured design changes to retain behavior; no generic-dispatch rewrite is included in this slice. bloat-axum-x86-functions.log

Function-level `.text` attribution shows the largest actionable bodies: `auth::http::execute` 88.5 KiB, `runtime::build_router_core` 81.4 KiB, `MeshService::execute` 71.6 KiB, `runtime::remote_router` 57.0 KiB, `embedded::run_actor` 48.9 KiB and `bootstrap_api::run` 41.7 KiB. These server and mesh paths need measured design changes to retain behavior; no generic-dispatch rewrite is included in this slice. [bloat-axum-x86-functions.log](https://git.kayg.org/attachments/34ed0cd4-0892-4757-bb78-77a0e9fb2e72)
kayg commented 2026-10-15 04:43:11 +00:00
Author
Owner
Copy link

Clean AArch64 release candidate is 19,576,520 B, 5,280 B below the existing 19,581,800 B cap; static linkage and production-trust checks pass. Its protected-key runtime check remains for the native AArch64 gate. x86 remains 21,403,120 B (4,448 B below cap, 1,070,016 B above production target). Receipts: AArch64 size/trust, build log. The short-path real-protocol perf run is still queued.

Clean AArch64 release candidate is 19,576,520 B, 5,280 B below the existing 19,581,800 B cap; static linkage and production-trust checks pass. Its protected-key runtime check remains for the native AArch64 gate. x86 remains 21,403,120 B (4,448 B below cap, 1,070,016 B above production target). Receipts: [AArch64 size/trust](https://git.kayg.org/attachments/81e0f1d8-136b-484c-98ae-256a7d7804a0), [build log](https://git.kayg.org/attachments/c1abe856-dd32-4e2a-bcc9-c6df31039885). The short-path real-protocol perf run is still queued.
kayg commented 2026-10-15 05:02:43 +00:00
Author
Owner
Copy link

Finding: the corrected short-label Axum candidate (q, Rustls 0.23.45; 21,397,584 B) passed real terminal.open n=100, but measured p50 44,551.7 µs / p95 60,295.8 µs / p99 68,027.5 µs (load average 3.39→3.36). D264 control measured p50 20,675.0 µs / p95 47,254.5 µs / p99 59,119.2 µs (load 3.30→3.20). The runs are in different lock windows, so the slower candidate result is not attributed to the feature cut yet; no size cap or commit change is accepted pending a paired comparison. Candidate receipt: open-axum-clean-short.log; control: open-d264-control.log.

Finding: the corrected short-label Axum candidate (`q`, Rustls 0.23.45; 21,397,584 B) passed real `terminal.open` n=100, but measured p50 44,551.7 µs / p95 60,295.8 µs / p99 68,027.5 µs (load average 3.39→3.36). D264 control measured p50 20,675.0 µs / p95 47,254.5 µs / p99 59,119.2 µs (load 3.30→3.20). The runs are in different lock windows, so the slower candidate result is not attributed to the feature cut yet; no size cap or commit change is accepted pending a paired comparison. Candidate receipt: [open-axum-clean-short.log](https://git.kayg.org/attachments/671943d2-f6ca-4c93-b67e-4743f992cff9); control: [open-d264-control.log](https://git.kayg.org/attachments/6c5a9396-ea4d-4812-b041-f9b591e0e3a6).
kayg commented 2026-10-15 05:05:25 +00:00
Author
Owner
Copy link

Finding: h2 remains reachable in the shipping dependency graph through axum-server's server-auto feature, which enables hyper-util/http2 and hyper/http2; pruning it would remove an active server protocol. cargo bloat --crates attributes about 248.5 KiB of .text to h2 (approximate with LTO). Feature path receipt: h2-feature-path.txt; size attribution: bloat-axum-x86-crates.log.

Finding: `h2` remains reachable in the shipping dependency graph through `axum-server`'s `server-auto` feature, which enables `hyper-util/http2` and `hyper/http2`; pruning it would remove an active server protocol. `cargo bloat --crates` attributes about 248.5 KiB of `.text` to `h2` (approximate with LTO). Feature path receipt: [h2-feature-path.txt](https://git.kayg.org/attachments/a7470ee2-2ab4-4ec1-a0ab-0a642b839fa8); size attribution: [bloat-axum-x86-crates.log](https://git.kayg.org/attachments/7aeb185f-0bed-46da-97f4-eb3b535caf3e).
kayg commented 2026-10-15 05:08:35 +00:00
Author
Owner
Copy link

Axum feature-prune candidate iterate gate passed: fmt, VT native fmt, CLI plugin compile-out, all-target Clippy, Rust workspace tests, cargo-deny, tracer TypeScript tests, TypeScript protocol tests (37 passed, 0 failed). The exact Rustls 0.23.46 static candidate measures x86_64 21,403,120 B and AArch64 19,576,520 B; both match the proposed exact caps and pass production trust checks. x86_64 protected-key runtime check passed; AArch64 runtime check requires native execution. Full iterate transcript: iterate-axum-rustls046.log. Paired perf comparison is pending before commit/cap ratchet.

Axum feature-prune candidate iterate gate passed: fmt, VT native fmt, CLI plugin compile-out, all-target Clippy, Rust workspace tests, cargo-deny, tracer TypeScript tests, TypeScript protocol tests (37 passed, 0 failed). The exact Rustls 0.23.46 static candidate measures x86_64 21,403,120 B and AArch64 19,576,520 B; both match the proposed exact caps and pass production trust checks. x86_64 protected-key runtime check passed; AArch64 runtime check requires native execution. Full iterate transcript: [iterate-axum-rustls046.log](https://git.kayg.org/attachments/96b5ae18-f4e1-4ab0-9fc3-466b50a66da2). Paired perf comparison is pending before commit/cap ratchet.
kayg commented 2026-10-15 05:32:16 +00:00
Author
Owner
Copy link

Paired D264/current-candidate performance comparison remains queued on the shared perf-VM lock and has not started. The exact .46 candidate (21,403,120 B) and D264 baseline (21,407,568 B) are staged and SHA-verified. One lock window will run 300 terminal opens and 100 RTT-300 ms keystroke/echo samples per binary. The Axum size ratchet remains pending that result.

Paired D264/current-candidate performance comparison remains queued on the shared perf-VM lock and has not started. The exact .46 candidate (21,403,120 B) and D264 baseline (21,407,568 B) are staged and SHA-verified. One lock window will run 300 terminal opens and 100 RTT-300 ms keystroke/echo samples per binary. The Axum size ratchet remains pending that result.
kayg commented 2026-10-15 06:04:53 +00:00
Author
Owner
Copy link

Finding: the first paired flock -w 3600 request exited 1 after about an hour with an empty output log; no benchmark entered its measurement scope and no timing was produced. I am requeuing the same D264/candidate comparison under the shared lock as instructed.

Finding: the first paired `flock -w 3600` request exited 1 after about an hour with an empty output log; no benchmark entered its measurement scope and no timing was produced. I am requeuing the same D264/candidate comparison under the shared lock as instructed.
kayg commented 2026-10-15 06:39:49 +00:00
Author
Owner
Copy link

Axum feature-prune candidate paired against D264 on the perf VM, one locked window, 4 cores, CPUWeight=10000; load average 2.56 1.79 1.30 at start and 0.29 0.77 0.98 at end. Real-protocol terminal open n=300: D264 p50/p95/p99 346.373/378.342/414.816 ms; Rustls .46 + Axum-pruned candidate 350.993/378.268/388.873 ms (+4.620 ms p50, unchanged p95, −25.943 ms p99). RTT300 echo/PTY n=100 passed the 334 ms p99 budget for both binaries, and flood isolation passed the 16.67 ms growth budget. Candidate baseline echo/PTY p99 324.71/324.73 ms; under other-session flood 299.73/299.80 ms. Repeating terminal-open in reverse order to resolve the small p50 difference before accepting the size cut. Receipt: perf-paired-rustls046.log.

Axum feature-prune candidate paired against D264 on the perf VM, one locked window, 4 cores, CPUWeight=10000; load average 2.56 1.79 1.30 at start and 0.29 0.77 0.98 at end. Real-protocol terminal open n=300: D264 p50/p95/p99 346.373/378.342/414.816 ms; Rustls .46 + Axum-pruned candidate 350.993/378.268/388.873 ms (+4.620 ms p50, unchanged p95, −25.943 ms p99). RTT300 echo/PTY n=100 passed the 334 ms p99 budget for both binaries, and flood isolation passed the 16.67 ms growth budget. Candidate baseline echo/PTY p99 324.71/324.73 ms; under other-session flood 299.73/299.80 ms. Repeating terminal-open in reverse order to resolve the small p50 difference before accepting the size cut. Receipt: [perf-paired-rustls046.log](https://git.kayg.org/attachments/95e7cc46-6363-42fa-a8b9-b592375cb96d).
kayg commented 2026-10-15 06:42:22 +00:00
Author
Owner
Copy link

Self-review finding: docs/PROCESS.md referenced docs/verification/size-ratchet/README.md, but that path is absent from this branch (rg --files docs | rg size-ratchet returned no match). Updated the size section to point attribution, retained feature costs and runtime tradeoffs to #198, where the receipts and findings are recorded.

Self-review finding: `docs/PROCESS.md` referenced `docs/verification/size-ratchet/README.md`, but that path is absent from this branch (`rg --files docs | rg size-ratchet` returned no match). Updated the size section to point attribution, retained feature costs and runtime tradeoffs to #198, where the receipts and findings are recorded.
kayg commented 2026-10-15 07:16:18 +00:00
Author
Owner
Copy link

Reverse-order terminal-open pair finished on the perf VM under one lock, 4 cores, CPUWeight=10000; load average 1.31 1.73 2.24 at start and 0.30 0.98 1.82 at end. Candidate first, n=300: p50/p95/p99 348.769/372.860/417.925 ms. D264 second, n=300: 346.953/370.570/385.001 ms. Candidate deltas were +1.816 ms (+0.52%) p50, +2.291 ms (+0.62%) p95 and +32.924 ms (+8.55%) p99. Together with the prior D264-first pair (+4.620 ms p50, −0.074 ms p95, −25.943 ms p99), p50 is consistently slightly higher while tail results vary. The prior paired echo run passed the 334 ms p99 and 16.67 ms flood-growth budgets. Receipt: perf-open-reverse-rustls046.log.

Reverse-order terminal-open pair finished on the perf VM under one lock, 4 cores, CPUWeight=10000; load average 1.31 1.73 2.24 at start and 0.30 0.98 1.82 at end. Candidate first, n=300: p50/p95/p99 348.769/372.860/417.925 ms. D264 second, n=300: 346.953/370.570/385.001 ms. Candidate deltas were +1.816 ms (+0.52%) p50, +2.291 ms (+0.62%) p95 and +32.924 ms (+8.55%) p99. Together with the prior D264-first pair (+4.620 ms p50, −0.074 ms p95, −25.943 ms p99), p50 is consistently slightly higher while tail results vary. The prior paired echo run passed the 334 ms p99 and 16.67 ms flood-growth budgets. Receipt: [perf-open-reverse-rustls046.log](https://git.kayg.org/attachments/80c84a16-4f9f-4043-85d7-c6a9a734f167).
kayg commented 2026-10-15 07:30:22 +00:00
Author
Owner
Copy link

Size control resolved the Axum cut decision. With the Rustls 0.23.46 advisory update and committed Axum defaults, shipping static sizes are x86_64 21,409,072 B (+1,504 over the unchanged 21,407,568 B cap) and AArch64 19,582,344 B (+544 over 19,581,800 B). Disabling only the unused form/query/matched-path/original-URI extractor features yields the already measured candidate 21,403,120 B and 19,576,520 B, saving 5,952 B and 5,824 B from the .46 defaults and staying below both old caps. The feature-tree and Rust source review found no uses of the removed extractors; iterate passed. This makes the prune necessary to carry the advisory update without raising the caps. Terminal-open pair measurements show +1.816 to +4.620 ms p50, p95 within −0.074 to +2.291 ms, and variable p99; RTT300 echo and flood checks passed. New exact caps are ratcheted to candidate size. The production x86 target remains 1,070,016 B lower. Control receipt: unpruned-rustls046-static-size.log.

Size control resolved the Axum cut decision. With the Rustls 0.23.46 advisory update and committed Axum defaults, shipping static sizes are x86_64 21,409,072 B (+1,504 over the unchanged 21,407,568 B cap) and AArch64 19,582,344 B (+544 over 19,581,800 B). Disabling only the unused form/query/matched-path/original-URI extractor features yields the already measured candidate 21,403,120 B and 19,576,520 B, saving 5,952 B and 5,824 B from the .46 defaults and staying below both old caps. The feature-tree and Rust source review found no uses of the removed extractors; iterate passed. This makes the prune necessary to carry the advisory update without raising the caps. Terminal-open pair measurements show +1.816 to +4.620 ms p50, p95 within −0.074 to +2.291 ms, and variable p99; RTT300 echo and flood checks passed. New exact caps are ratcheted to candidate size. The production x86 target remains 1,070,016 B lower. Control receipt: [unpruned-rustls046-static-size.log](https://git.kayg.org/attachments/f66136f3-dec7-4147-8628-97267c32df7b).
kayg commented 2026-10-15 07:30:57 +00:00
Author
Owner
Copy link

Committed and pushed a2feac5bfe to size-ratchet-r2. Axum now omits unused form/query/matched-path/original-URI extractor features; exact caps are 21,403,120 B x86_64 and 19,576,520 B AArch64. The .46 default-feature control measured 21,409,072 B (+1,504 over prior cap) and 19,582,344 B (+544); the cut saves 5,952 B / 5,824 B. scripts/verify iterate passed: server 423 passed, 46 ignored, 0 failed; TypeScript protocol 37 passed, 0 failed. Paired terminal-open and echo measurements plus static control receipts are attached in the preceding comments. Full scripts/verify fast remains for branch head.

Committed and pushed a2feac5bfe8b8d59091ec3c5cd09c680239076b8 to `size-ratchet-r2`. Axum now omits unused form/query/matched-path/original-URI extractor features; exact caps are 21,403,120 B x86_64 and 19,576,520 B AArch64. The .46 default-feature control measured 21,409,072 B (+1,504 over prior cap) and 19,582,344 B (+544); the cut saves 5,952 B / 5,824 B. `scripts/verify iterate` passed: server 423 passed, 46 ignored, 0 failed; TypeScript protocol 37 passed, 0 failed. Paired terminal-open and echo measurements plus static control receipts are attached in the preceding comments. Full `scripts/verify fast` remains for branch head.
kayg commented 2026-10-15 07:49:13 +00:00
Author
Owner
Copy link

Final scripts/verify fast passed all rows through cargo-deny. The static x86_64 and AArch64 artifacts both passed trust, static linkage, key-memory where native, and exact-size checks (21,403,120 B and 19,576,520 B), but the static-size boundary fixture failed with TypeError: 'NoneType' object is not subscriptable at scripts/test-static-size.py:32. The gate prints cap: <bytes> bytes; the fixture parser still searches for max <bytes>. Full failed transcript: fast-final.log. I’m reproducing the focused failure before fixing the parser.

Final `scripts/verify fast` passed all rows through cargo-deny. The static x86_64 and AArch64 artifacts both passed trust, static linkage, key-memory where native, and exact-size checks (21,403,120 B and 19,576,520 B), but the static-size boundary fixture failed with `TypeError: 'NoneType' object is not subscriptable` at `scripts/test-static-size.py:32`. The gate prints `cap: <bytes> bytes`; the fixture parser still searches for `max <bytes>`. Full failed transcript: [fast-final.log](https://git.kayg.org/attachments/110c902c-99d7-40d8-8405-9823886a14fe). I’m reproducing the focused failure before fixing the parser.
kayg commented 2026-10-15 07:50:07 +00:00
Author
Owner
Copy link

Committed and pushed 3f9efe8323. The focused static-size boundary test now passes exact cap, cap+1 rejection, downward ratchet, and unsupported target for both architectures. Before/after receipts: static-size-parser-before.log, static-size-parser-after.log. The prior fast run failed only at this parser; rerunning scripts/verify fast on the new head now.

Committed and pushed 3f9efe8323a0eba3a5029702d9332f5f8225a139. The focused static-size boundary test now passes exact cap, cap+1 rejection, downward ratchet, and unsupported target for both architectures. Before/after receipts: [static-size-parser-before.log](https://git.kayg.org/attachments/ce5c3732-6498-4a9f-b82e-97731ae18b6a), [static-size-parser-after.log](https://git.kayg.org/attachments/46816f7e-bbc8-4335-9f54-a3d4cbb52501). The prior fast run failed only at this parser; rerunning `scripts/verify fast` on the new head now.
kayg commented 2026-10-15 08:04:17 +00:00
Author
Owner
Copy link

Finished on pushed head 3f9efe8323a0eba3a5029702d9332f5f8225a139 (size-ratchet-r2); worktree clean. No deployment.

Target Exact cap and measured size Production x86 target
x86_64 21,403,120 B 20,333,104 B (gap 1,070,016 B)
AArch64 19,576,520 B —

The Axum extractor prune removes no in-use server or fuzz extractor path. Against Rustls .46 with Axum defaults, static size was 21,409,072 B x86_64 (+1,504 over the existing cap) and 19,582,344 B AArch64 (+544). The prune saves 5,952 B and 5,824 B, preserving the unchanged caps; both new caps are ratcheted to exact shipping size. Paired real-protocol terminal-open n=300 measurements: D264-first candidate p50/p95/p99 350.993/378.268/388.873 ms vs 346.373/378.342/414.816 ms; reverse-order candidate 348.769/372.860/417.925 ms vs D264 346.953/370.570/385.001 ms. RTT300 echo and flood checks passed their 334 ms p99 and 16.67 ms growth limits. Full feature and latency receipts are attached above.

Remaining measured .text attribution (cargo-bloat, approximate; these are retained feature costs, not directly recoverable savings): server 2.5 MiB; OpenSSL C 1.2 MiB; plugin-mesh 557.7 KiB; agent 457.2 KiB; quinn-proto 432.7 KiB; CLI crate 363.6 KiB; Rustls 354 KiB; infraternal-mesh 106 KiB; h2 248.5 KiB; unattributed/native 3.3 MiB. The server, agent, mesh, remote QUIC/TLS and HTTP/2 paths are active features. Replacing the crypto path previously saved 394,528 B but raised connection CPU 95% and regressed handshake latency; reducing the CLI profile saved 78,208 B but failed the real terminal.open protocol test. Further removal of these paths loses features or needs an owner-level engine decision. No safe feature-preserving cut identified in this lane reaches the remaining 1,070,016 B.

Final scripts/verify fast transcript: fast-final-3f9efe83.log (303,932 bytes). Gate summary, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Server suite: test result: ok. 423 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 333.47s

TypeScript protocol suite, verbatim:

 37 pass
 0 fail
 34463 expect() calls
Ran 37 tests across 10 files. [7.23s]
Finished on pushed head `3f9efe8323a0eba3a5029702d9332f5f8225a139` (`size-ratchet-r2`); worktree clean. No deployment. | Target | Exact cap and measured size | Production x86 target | | --- | ---: | ---: | | x86_64 | 21,403,120 B | 20,333,104 B (gap 1,070,016 B) | | AArch64 | 19,576,520 B | — | The Axum extractor prune removes no in-use server or fuzz extractor path. Against Rustls .46 with Axum defaults, static size was 21,409,072 B x86_64 (+1,504 over the existing cap) and 19,582,344 B AArch64 (+544). The prune saves 5,952 B and 5,824 B, preserving the unchanged caps; both new caps are ratcheted to exact shipping size. Paired real-protocol terminal-open n=300 measurements: D264-first candidate p50/p95/p99 350.993/378.268/388.873 ms vs 346.373/378.342/414.816 ms; reverse-order candidate 348.769/372.860/417.925 ms vs D264 346.953/370.570/385.001 ms. RTT300 echo and flood checks passed their 334 ms p99 and 16.67 ms growth limits. Full feature and latency receipts are attached above. Remaining measured `.text` attribution (cargo-bloat, approximate; these are retained feature costs, not directly recoverable savings): server 2.5 MiB; OpenSSL C 1.2 MiB; plugin-mesh 557.7 KiB; agent 457.2 KiB; quinn-proto 432.7 KiB; CLI crate 363.6 KiB; Rustls 354 KiB; infraternal-mesh 106 KiB; h2 248.5 KiB; unattributed/native 3.3 MiB. The server, agent, mesh, remote QUIC/TLS and HTTP/2 paths are active features. Replacing the crypto path previously saved 394,528 B but raised connection CPU 95% and regressed handshake latency; reducing the CLI profile saved 78,208 B but failed the real `terminal.open` protocol test. Further removal of these paths loses features or needs an owner-level engine decision. No safe feature-preserving cut identified in this lane reaches the remaining 1,070,016 B. Final `scripts/verify fast` transcript: [fast-final-3f9efe83.log](https://git.kayg.org/attachments/59541404-3158-408e-9083-4c1c82d52644) (303,932 bytes). Gate summary, verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` Server suite: `test result: ok. 423 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 333.47s` TypeScript protocol suite, verbatim: ```text 37 pass 0 fail 34463 expect() calls Ran 37 tests across 10 files. [7.23s] ```
kayg commented 2026-10-15 08:07:32 +00:00
Author
Owner
Copy link

Started independent review on branch review-size-ratchet-r2, head 3f9efe8323a0eba3a5029702d9332f5f8225a139, diff base with origin/dev 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6.

Started independent review on branch `review-size-ratchet-r2`, head `3f9efe8323a0eba3a5029702d9332f5f8225a139`, diff base with `origin/dev` `57b0c3ddca8e190f674071e39dcc0aed1ca76cf6`.
kayg commented 2026-10-15 08:10:36 +00:00
Author
Owner
Copy link

Review step complete at implementation head 3f9efe8323: read the project rules, #198 history, the related #194 record, the job report, and the diff from base 57b0c3ddca. The diff changes 11 paths and no contracts; no functional finding is confirmed yet. Proceeding to independent gates.

Review step complete at implementation head 3f9efe8323a0eba3a5029702d9332f5f8225a139: read the project rules, #198 history, the related #194 record, the job report, and the diff from base 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6. The diff changes 11 paths and no contracts; no functional finding is confirmed yet. Proceeding to independent gates.
kayg commented 2026-10-15 08:10:37 +00:00
Author
Owner
Copy link

Review validation limit: the brief requests at least 10 interleaved terminal-open pairs on the perf VM, then explicitly says never to use the perf VM. I will honor the prohibition. Existing #198 evidence has two n=300 pairs with p50 deltas +4.620 ms and +1.816 ms, but does not supply the requested 10-pair confidence interval. I cannot confirm or exclude a reliable latency regression here; this remains unassessed and is not a confirmed P1 finding.

Review validation limit: the brief requests at least 10 interleaved terminal-open pairs on the perf VM, then explicitly says never to use the perf VM. I will honor the prohibition. Existing #198 evidence has two n=300 pairs with p50 deltas +4.620 ms and +1.816 ms, but does not supply the requested 10-pair confidence interval. I cannot confirm or exclude a reliable latency regression here; this remains unassessed and is not a confirmed P1 finding.
kayg commented 2026-10-15 09:04:50 +00:00
Author
Owner
Copy link

Independent gate step complete on implementation head 3f9efe8323. Static results: x86_64 21,403,120 B and AArch64 19,576,520 B, both exact caps; the OpenSSL AES-128-GCM vector and both architecture boundary fixtures pass. The first full fast gate has clippy and test FAIL (101) from missing OpenSSL build-source and Cargo fingerprint paths (ENOENT); fmt, VT fmt, CLI compile-out, cargo-deny and static builds pass. Full transcript: $HOME/.cache/codex-scratch/size-ratchet-r2-review/fast.log. I’m rerunning the affected rows with the warmed target to determine whether the path loss reproduces.

Independent gate step complete on implementation head 3f9efe8323a0eba3a5029702d9332f5f8225a139. Static results: x86_64 21,403,120 B and AArch64 19,576,520 B, both exact caps; the OpenSSL AES-128-GCM vector and both architecture boundary fixtures pass. The first full fast gate has `clippy` and `test` FAIL (101) from missing OpenSSL build-source and Cargo fingerprint paths (ENOENT); fmt, VT fmt, CLI compile-out, cargo-deny and static builds pass. Full transcript: `$HOME/.cache/codex-scratch/size-ratchet-r2-review/fast.log`. I’m rerunning the affected rows with the warmed target to determine whether the path loss reproduces.
kayg commented 2026-10-15 09:28:32 +00:00
Author
Owner
Copy link

Second independent fast-gate run on 3f9efe8323: clippy now PASS (757s), cargo-deny PASS, and static builds PASS at exact caps 21,403,120 B x86_64 / 19,576,520 B AArch64. The OpenSSL patch test and AES-GCM vector pass. The workspace test row still fails (101), this time because rust-lld cannot open many target/debug/deps/*.rlib paths during the infraternal-server enrollment-test link; no assertion failure is reported. I’m retrying the workspace test with serialized Cargo builds to determine whether this is target artifact loss under parallel compilation.
Transcript: $HOME/.cache/codex-scratch/size-ratchet-r2-review/fast-retry.log.

Second independent fast-gate run on 3f9efe8323a0eba3a5029702d9332f5f8225a139: `clippy` now PASS (757s), cargo-deny PASS, and static builds PASS at exact caps 21,403,120 B x86_64 / 19,576,520 B AArch64. The OpenSSL patch test and AES-GCM vector pass. The workspace test row still fails (101), this time because rust-lld cannot open many `target/debug/deps/*.rlib` paths during the `infraternal-server` enrollment-test link; no assertion failure is reported. I’m retrying the workspace test with serialized Cargo builds to determine whether this is target artifact loss under parallel compilation. Transcript: `$HOME/.cache/codex-scratch/size-ratchet-r2-review/fast-retry.log`.
kayg commented 2026-10-15 09:34:47 +00:00
Author
Owner
Copy link

The serial workspace-test retry is queued on the required host build-slot wrapper and has not acquired a slot; its log is empty. No source change is needed. I’m waiting for slot availability before the final retry.

The serial workspace-test retry is queued on the required host build-slot wrapper and has not acquired a slot; its log is empty. No source change is needed. I’m waiting for slot availability before the final retry.
kayg commented 2026-10-15 09:48:29 +00:00
Author
Owner
Copy link

Update: the serialized workspace-test retry remains queued at 11:48 local time; the log is still empty. Build-slot availability is the only outstanding operational dependency before I can complete the test retry and final gate.

Update: the serialized workspace-test retry remains queued at 11:48 local time; the log is still empty. Build-slot availability is the only outstanding operational dependency before I can complete the test retry and final gate.
kayg commented 2026-10-15 10:08:48 +00:00
Author
Owner
Copy link

Update at 12:08 local time: the serial workspace-test command remains queued behind the required build-slot wrapper and its log is still empty. The review cannot establish the test row result until a slot becomes available.

Update at 12:08 local time: the serial workspace-test command remains queued behind the required build-slot wrapper and its log is still empty. The review cannot establish the test row result until a slot becomes available.
kayg commented 2026-10-15 10:24:20 +00:00
Author
Owner
Copy link

Serialized workspace-test retry completed with exit 101, but again failed before assertions: rustc could not write target/debug/deps/libinfraternal_mesh-….rmeta because the parent path no longer existed. The whole target/debug directory is absent after the command; df showed 69 GB free, and repository script search found no target/debug cleanup. The first run lost OpenSSL source paths; the second lost debug rlibs. I’m retrying under a differently named scratch CARGO_TARGET_DIR to avoid the disappearing target/debug path.
Transcript: $HOME/.cache/codex-scratch/size-ratchet-r2-review/workspace-test-serial.log.

Serialized workspace-test retry completed with exit 101, but again failed before assertions: rustc could not write `target/debug/deps/libinfraternal_mesh-….rmeta` because the parent path no longer existed. The whole `target/debug` directory is absent after the command; `df` showed 69 GB free, and repository script search found no target/debug cleanup. The first run lost OpenSSL source paths; the second lost debug rlibs. I’m retrying under a differently named scratch CARGO_TARGET_DIR to avoid the disappearing `target/debug` path. Transcript: `$HOME/.cache/codex-scratch/size-ratchet-r2-review/workspace-test-serial.log`.
kayg commented 2026-10-15 10:48:27 +00:00
Author
Owner
Copy link

Update at 12:48 local time: the alternate build-cache target-root workspace-test retry is still queued on the host build-slot wrapper; its log remains empty. Static builds passed in both complete fast-gate attempts. I cannot resolve the workspace test until a build slot is released.

Update at 12:48 local time: the alternate `build-cache` target-root workspace-test retry is still queued on the host build-slot wrapper; its log remains empty. Static builds passed in both complete fast-gate attempts. I cannot resolve the workspace test until a build slot is released.
kayg commented 2026-10-15 11:49:42 +00:00
Author
Owner
Copy link

Review complete at head 3f9efe8323 (branch review-size-ratchet-r2; base 57b0c3ddca).

Verdict: MERGE (no confirmed P0/P1). Findings: P0=0, P1=0, P2=0, P3=0. No test commits were made because no code failure was confirmed.

git diff --check passed. scripts/verify fast on the reviewed head exited 1; the gate summary was:

+---------------------------+--------------+
| Rust gate | Result |
+---------------------------+--------------+
| fmt | PASS |
| VT native fmt | PASS |
| CLI plugin compile-out | PASS |
| clippy | PASS |
| test | FAIL (101) |
| cargo-deny | PASS |
| static builds | PASS |
+---------------------------+--------------+

The test failure was rustc unable to write into a missing target/debug/deps directory before assertions ran. Static builds measured 21,403,120 B (x86_64) and 19,576,520 B (AArch64); AES-GCM vector and both size-boundary fixtures passed. An isolated workspace run passed 91 test groups before the shim mouse helper stopped because zig was absent from PATH; rerunning that test with the cached Zig 0.15.2 passed 1/1. The full corrected workspace rerun did not complete.

The requested perf-VM A/B was not run because this brief also explicitly prohibits perf-VM access. The two existing pairs remain insufficient to determine whether the reported latency delta is reliable; no P1 latency finding is confirmed.

Review complete at head 3f9efe8323a0eba3a5029702d9332f5f8225a139 (branch review-size-ratchet-r2; base 57b0c3ddca8e190f674071e39dcc0aed1ca76cf6). Verdict: MERGE (no confirmed P0/P1). Findings: P0=0, P1=0, P2=0, P3=0. No test commits were made because no code failure was confirmed. `git diff --check` passed. `scripts/verify fast` on the reviewed head exited 1; the gate summary was: +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ The test failure was rustc unable to write into a missing `target/debug/deps` directory before assertions ran. Static builds measured 21,403,120 B (x86_64) and 19,576,520 B (AArch64); AES-GCM vector and both size-boundary fixtures passed. An isolated workspace run passed 91 test groups before the shim mouse helper stopped because `zig` was absent from PATH; rerunning that test with the cached Zig 0.15.2 passed 1/1. The full corrected workspace rerun did not complete. The requested perf-VM A/B was not run because this brief also explicitly prohibits perf-VM access. The two existing pairs remain insufficient to determine whether the reported latency delta is reliable; no P1 latency finding is confirmed.
kayg commented 2026-10-15 14:03:47 +00:00
Author
Owner
Copy link

Started the size-ratchet-r2 paired A/B on branch ab-checks, based at origin/dev 65d6421492. The worktree is clean. Next I’ll build both revisions with matching settings, then run at least 10 interleaved terminal-open pairs on the locked perf VM and report percentile deltas with bootstrap 95% CIs.

Started the size-ratchet-r2 paired A/B on branch `ab-checks`, based at `origin/dev` 65d64214926e4b799e53a0b442bf97a4756d8c7b. The worktree is clean. Next I’ll build both revisions with matching settings, then run at least 10 interleaved terminal-open pairs on the locked perf VM and report percentile deltas with bootstrap 95% CIs.
kayg commented 2026-10-15 14:51:26 +00:00
Author
Owner
Copy link

Built the terminal-open comparison artifacts on the build host at unchanged worktree HEAD 65d6421492. Both were built with Rust 1.99.0, Zig 0.15.2, --release --locked, target x86_64-unknown-linux-musl, and the same cargo target directory.

Side Revision Stripped binary bytes SHA-256
dev 65d64214926e4b799e53a0b442bf97a4756d8c7b 22,277,392 27bd848e85eb552b7c7915b157472a2be4278e6beda3017619785fcee7556745
size-ratchet-r2 3f9efe8323a0eba3a5029702d9332f5f8225a139 21,403,120 eba4983d4aa74ee7fe8d1bc1fc03e8ca1b75c2c4cd89fe101339430af18e5926

Artifacts are staged under /root/infraternal-bench/ab-checks/ on the perf VM. No timing data collected yet.

Built the terminal-open comparison artifacts on the build host at unchanged worktree HEAD 65d64214926e4b799e53a0b442bf97a4756d8c7b. Both were built with Rust 1.99.0, Zig 0.15.2, `--release --locked`, target `x86_64-unknown-linux-musl`, and the same cargo target directory. | Side | Revision | Stripped binary bytes | SHA-256 | |---|---|---:|---| | dev | `65d64214926e4b799e53a0b442bf97a4756d8c7b` | 22,277,392 | `27bd848e85eb552b7c7915b157472a2be4278e6beda3017619785fcee7556745` | | size-ratchet-r2 | `3f9efe8323a0eba3a5029702d9332f5f8225a139` | 21,403,120 | `eba4983d4aa74ee7fe8d1bc1fc03e8ca1b75c2c4cd89fe101339430af18e5926` | Artifacts are staged under `/root/infraternal-bench/ab-checks/` on the perf VM. No timing data collected yet.
kayg commented 2026-10-15 16:25:39 +00:00
Author
Owner
Copy link

Terminal-open A/B complete: dev vs origin/size-ratchet-r2 (3f9efe83), 10 interleaved pairs, 300 opens per trial, same x86_64-musl release build settings, existing harness at configured RTT 300 ms, on the 4-vCPU perf VM. Baseline/candidate columns are medians across pairs; delta is the median paired candidate-minus-dev difference. CIs are paired bootstrap percentile 95% intervals (50,000 resamples).

Metric dev median (ms) r2 median (ms) paired delta (ms) 95% CI (ms) Verdict
p50 362.113 362.656 +0.074 [-0.643, +1.768] no measurable regression
p95 388.462 387.525 -0.352 [-2.022, +1.859] no measurable regression
p99 401.027 398.291 -0.759 [-8.567, +10.616] no measurable regression

All three CIs include zero. One isolated r2 pair had p99 558.969 ms vs 400.317 ms for dev; it is retained in the raw samples and the paired summary. Per-pair 1/5/15-minute load averages are recorded at pair start/end in ab-results.json; all 300 samples per trial are in open-phase.log.

HEAD: 65d64214926e4b799e53a0b442bf97a4756d8c7b; no repository files changed.

Terminal-open A/B complete: dev vs `origin/size-ratchet-r2` (`3f9efe83`), 10 interleaved pairs, 300 opens per trial, same x86_64-musl release build settings, existing harness at configured RTT 300 ms, on the 4-vCPU perf VM. Baseline/candidate columns are medians across pairs; delta is the median paired candidate-minus-dev difference. CIs are paired bootstrap percentile 95% intervals (50,000 resamples). | Metric | dev median (ms) | r2 median (ms) | paired delta (ms) | 95% CI (ms) | Verdict | |---|---:|---:|---:|---:|---| | p50 | 362.113 | 362.656 | +0.074 | [-0.643, +1.768] | no measurable regression | | p95 | 388.462 | 387.525 | -0.352 | [-2.022, +1.859] | no measurable regression | | p99 | 401.027 | 398.291 | -0.759 | [-8.567, +10.616] | no measurable regression | All three CIs include zero. One isolated r2 pair had p99 558.969 ms vs 400.317 ms for dev; it is retained in the raw samples and the paired summary. Per-pair 1/5/15-minute load averages are recorded at pair start/end in [ab-results.json](https://git.kayg.org/attachments/f1c11e82-43c3-4c8f-aac9-3395e61f09f3); all 300 samples per trial are in [open-phase.log](https://git.kayg.org/attachments/bf9c3995-d399-4e5b-99c2-f82561f84ee3). HEAD: `65d64214926e4b799e53a0b442bf97a4756d8c7b`; no repository files changed.
kayg commented 2026-10-15 18:53:26 +00:00
Author
Owner
Copy link

Full scripts/verify fast on unchanged HEAD 65d64214926e4b799e53a0b442bf97a4756d8c7b exited 1 after 3,323 seconds. Transcript: verify-fast.log

Gate summary (verbatim):

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Workspace tests: 420 passed, 3 failed, 46 ignored. Failures were browser_input_overload_retires_only_the_terminal_stream, review_mesh_watch_reports_liveness_expiry_without_another_edit, and saturated_native_control_queue_does_not_hide_primary_terminal_output. The first two are auth socket timing tests; the third is remote control queue delivery.

Static binary caps: x86_64 was 22,277,392 bytes against 22,204,304 (+73,088); aarch64 was 19,705,112 bytes against 19,638,744 (+66,368). The isolated test rerun is in progress and will be added as a follow-up.

Full `scripts/verify fast` on unchanged HEAD `65d64214926e4b799e53a0b442bf97a4756d8c7b` exited 1 after 3,323 seconds. Transcript: [verify-fast.log](https://git.kayg.org/attachments/33e9bbdb-0246-48a7-8df0-4e339c270352) Gate summary (verbatim): ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Workspace tests: 420 passed, 3 failed, 46 ignored. Failures were `browser_input_overload_retires_only_the_terminal_stream`, `review_mesh_watch_reports_liveness_expiry_without_another_edit`, and `saturated_native_control_queue_does_not_hide_primary_terminal_output`. The first two are auth socket timing tests; the third is remote control queue delivery. Static binary caps: x86_64 was 22,277,392 bytes against 22,204,304 (+73,088); aarch64 was 19,705,112 bytes against 19,638,744 (+66,368). The isolated test rerun is in progress and will be added as a follow-up.
kayg commented 2026-10-15 19:09:38 +00:00
Author
Owner
Copy link

Finished the #198 A/B measurement. No source changes or commits; HEAD 65d64214926e4b799e53a0b442bf97a4756d8c7b equals the merge base with origin/dev.

The requested terminal-open A/B verdict is no measurable regression. The three workspace test failures each passed when rerun individually (1 passed, 0 failed); logs: credit test, liveness test, remote control queue test. The #198 result table and per-pair load averages are in the earlier measurement comment and attached raw results.

The full gate still exits 1 because of those three workspace failures and both static-size caps. Isolated reruns passing does not change the full-gate result. x86_64 stripped static size is 22,277,392 bytes on HEAD and merge base (delta 0 bytes); it exceeds the 22,204,304-byte cap by 73,088 bytes. aarch64 is 19,705,112 bytes, 66,368 above its 19,638,744-byte cap.

Final scripts/verify fast summary (verbatim):

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Transcript: verify-fast.log

Finished the #198 A/B measurement. No source changes or commits; HEAD `65d64214926e4b799e53a0b442bf97a4756d8c7b` equals the merge base with `origin/dev`. The requested terminal-open A/B verdict is **no measurable regression**. The three workspace test failures each passed when rerun individually (1 passed, 0 failed); logs: [credit test](https://git.kayg.org/attachments/bfc442f7-02d0-4a2f-8cb3-c3769a28e358), [liveness test](https://git.kayg.org/attachments/2057014c-b38f-4045-b7a7-c9e06010fa28), [remote control queue test](https://git.kayg.org/attachments/75c1ad7d-d7ae-4fca-8d6d-1dcb87cfddfe). The #198 result table and per-pair load averages are in the earlier measurement comment and attached raw results. The full gate still exits 1 because of those three workspace failures and both static-size caps. Isolated reruns passing does not change the full-gate result. x86_64 stripped static size is 22,277,392 bytes on HEAD and merge base (delta 0 bytes); it exceeds the 22,204,304-byte cap by 73,088 bytes. aarch64 is 19,705,112 bytes, 66,368 above its 19,638,744-byte cap. Final `scripts/verify fast` summary (verbatim): ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Transcript: [verify-fast.log](https://git.kayg.org/attachments/33e9bbdb-0246-48a7-8df0-4e339c270352)
kayg commented 2026-10-15 19:13:52 +00:00
Author
Owner
Copy link

Started merge-ready rebase for size-ratchet-r2 on branch size-ratchet-r2, current head 3f9efe8323a0eba3a5029702d9332f5f8225a139, clean worktree; refreshed origin/dev is 40cc9c5be9b863ab23a92dfeca9e46cc726737aa. Read #198 history; it names no parent issue. The recorded review verdict is MERGE and the 10-pair perf-VM A/B found no measurable terminal-open regression. Next: rebase onto dev, measure exact release sizes for dev and branch, preserve or lower the exact caps, run scripts/verify fast through build-slot, then force-with-lease push this branch.

Started merge-ready rebase for size-ratchet-r2 on branch `size-ratchet-r2`, current head `3f9efe8323a0eba3a5029702d9332f5f8225a139`, clean worktree; refreshed `origin/dev` is `40cc9c5be9b863ab23a92dfeca9e46cc726737aa`. Read #198 history; it names no parent issue. The recorded review verdict is MERGE and the 10-pair perf-VM A/B found no measurable terminal-open regression. Next: rebase onto dev, measure exact release sizes for dev and branch, preserve or lower the exact caps, run `scripts/verify fast` through build-slot, then force-with-lease push this branch.
kayg commented 2026-10-15 19:14:37 +00:00
Author
Owner
Copy link

Rebased size-ratchet-r2 onto origin/dev 40cc9c5be9b863ab23a92dfeca9e46cc726737aa without conflicts. Four commits replayed; the Rustls advisory commit was skipped because its patch is already represented on dev. Rebased head: 36013759f. The branch delta is 11 paths (267 insertions, 14 deletions). Next I’m measuring the exact x86_64 and AArch64 static release artifacts for this dev base and the rebased branch before touching the caps.

Rebased `size-ratchet-r2` onto `origin/dev` `40cc9c5be9b863ab23a92dfeca9e46cc726737aa` without conflicts. Four commits replayed; the Rustls advisory commit was skipped because its patch is already represented on dev. Rebased head: `36013759f`. The branch delta is 11 paths (267 insertions, 14 deletions). Next I’m measuring the exact x86_64 and AArch64 static release artifacts for this dev base and the rebased branch before touching the caps.
kayg commented 2026-10-15 19:19:43 +00:00
Author
Owner
Copy link

Measurement status: the dev baseline build is queued through the required build-slot; a nonblocking slot probe found all four build slots busy. No build started and no size result is claimed. The isolated dev source is 40cc9c5be9b863ab23a92dfeca9e46cc726737aa under job scratch; the queued command will report both architecture artifacts once admitted.

Measurement status: the dev baseline build is queued through the required `build-slot`; a nonblocking slot probe found all four build slots busy. No build started and no size result is claimed. The isolated dev source is `40cc9c5be9b863ab23a92dfeca9e46cc726737aa` under job scratch; the queued command will report both architecture artifacts once admitted.
kayg commented 2026-10-15 19:50:26 +00:00
Author
Owner
Copy link

Finding: exact x86_64-musl release build of origin/dev 40cc9c5be9b863ab23a92dfeca9e46cc726737aa is 22,329,104 bytes (stripped static PIE; SHA-256 cd923d0a4776c3dabedf7893eff1ccd89f3261d06de9006d6830e7e3e60c9825). The dev gate’s existing cap is 22,204,304 bytes, so this baseline is 124,800 bytes above it. The matching AArch64 build and both rebased branch builds are still in progress; no cap change is made before comparing both architectures.

Finding: exact x86_64-musl release build of `origin/dev` `40cc9c5be9b863ab23a92dfeca9e46cc726737aa` is 22,329,104 bytes (stripped static PIE; SHA-256 `cd923d0a4776c3dabedf7893eff1ccd89f3261d06de9006d6830e7e3e60c9825`). The dev gate’s existing cap is 22,204,304 bytes, so this baseline is 124,800 bytes above it. The matching AArch64 build and both rebased branch builds are still in progress; no cap change is made before comparing both architectures.
kayg commented 2026-10-15 20:08:50 +00:00
Author
Owner
Copy link

Completed exact release-size build for origin/dev 40cc9c5be9b863ab23a92dfeca9e46cc726737aa (locked release recipe; separate target root). Stripped static sizes: x86_64 22,329,104 B, AArch64 19,752,920 B. Both exceed dev’s recorded caps by 124,800 B and 114,176 B respectively. SHA-256 and ELF details: dev-release-sizes.txt. The branch build remains queued; caps remain unchanged pending comparison.

Completed exact release-size build for `origin/dev` `40cc9c5be9b863ab23a92dfeca9e46cc726737aa` (locked release recipe; separate target root). Stripped static sizes: x86_64 22,329,104 B, AArch64 19,752,920 B. Both exceed dev’s recorded caps by 124,800 B and 114,176 B respectively. SHA-256 and ELF details: [dev-release-sizes.txt](https://git.kayg.org/attachments/c7b9c685-acb2-43d8-bad9-3142143065c1). The branch build remains queued; caps remain unchanged pending comparison.
kayg commented 2026-10-15 20:40:54 +00:00
Author
Owner
Copy link

Finding: exact x86_64-musl release build of rebased size-ratchet-r2 36013759f5f9153cebc20d07c90ee2f8c30d96b4 is 21,455,472 B (stripped static PIE; SHA-256 cd84fe824e4b527ad74193e01bb0ca0465ccf5920ddf2a09877404890f0d8f47). It is 52,352 B above the previous branch cap and 873,632 B below the measured origin/dev artifact (22,329,104 B). Receipt: branch-x86-release-size.txt. The AArch64 branch build is still running; the cap edit waits for that comparison.

Finding: exact x86_64-musl release build of rebased `size-ratchet-r2` `36013759f5f9153cebc20d07c90ee2f8c30d96b4` is 21,455,472 B (stripped static PIE; SHA-256 `cd84fe824e4b527ad74193e01bb0ca0465ccf5920ddf2a09877404890f0d8f47`). It is 52,352 B above the previous branch cap and 873,632 B below the measured `origin/dev` artifact (22,329,104 B). Receipt: [branch-x86-release-size.txt](https://git.kayg.org/attachments/dd63f590-087a-4040-9bd7-9b2a39b1a82a). The AArch64 branch build is still running; the cap edit waits for that comparison.
kayg commented 2026-10-15 20:41:07 +00:00
Author
Owner
Copy link

Correction: the prior x86 measurement comment had a mistyped full branch SHA. The correct SHA is 36013759faf7aa85f8c0f6acebbb9b2683759097; the artifact size and checksum are unchanged. Corrected receipt: branch-x86-release-size-corrected.txt.

Correction: the prior x86 measurement comment had a mistyped full branch SHA. The correct SHA is `36013759faf7aa85f8c0f6acebbb9b2683759097`; the artifact size and checksum are unchanged. Corrected receipt: [branch-x86-release-size-corrected.txt](https://git.kayg.org/attachments/a57fedb2-4480-43bb-8ffb-56404ab27075).
kayg commented 2026-10-15 21:04:12 +00:00
Author
Owner
Copy link

Completed exact locked release builds for both architectures using isolated Cargo targets.

Target origin/dev 40cc9c5b rebased branch 36013759 branch minus dev dev cap proposed exact branch cap
x86_64 22,329,104 B 21,455,472 B −873,632 B 22,204,304 B 21,455,472 B
AArch64 19,752,920 B 19,624,712 B −128,208 B 19,638,744 B 19,624,712 B

The branch artifacts are below both measured dev artifacts and the current dev caps. Exact caps therefore ratchet down from dev by 748,832 B x86_64 and 14,032 B AArch64. The existing pre-rebase branch caps were 21,403,120 / 19,576,520 B; those are stale for the rebased sources. Artifact hashes and recipe: rebased-release-size-comparison.txt. I’m updating both gate constants and the matching process table to the measured branch sizes before the final gate.

Completed exact locked release builds for both architectures using isolated Cargo targets. | Target | `origin/dev` 40cc9c5b | rebased branch 36013759 | branch minus dev | dev cap | proposed exact branch cap | |---|---:|---:|---:|---:|---:| | x86_64 | 22,329,104 B | 21,455,472 B | −873,632 B | 22,204,304 B | 21,455,472 B | | AArch64 | 19,752,920 B | 19,624,712 B | −128,208 B | 19,638,744 B | 19,624,712 B | The branch artifacts are below both measured dev artifacts and the current dev caps. Exact caps therefore ratchet down from dev by 748,832 B x86_64 and 14,032 B AArch64. The existing pre-rebase branch caps were 21,403,120 / 19,576,520 B; those are stale for the rebased sources. Artifact hashes and recipe: [rebased-release-size-comparison.txt](https://git.kayg.org/attachments/bc1c197c-9507-4065-88a3-adcaa1f81a35). I’m updating both gate constants and the matching process table to the measured branch sizes before the final gate.
kayg commented 2026-10-15 22:17:37 +00:00
Author
Owner
Copy link

Cap-ratchet step staged on size-ratchet-r2 at pre-commit head 36013759faf7aa85f8c0f6acebbb9b2683759097: scripts/verify.d/rust.sh and docs/PROCESS.md now match exact rebased artifact sizes (21,455,472 B x86_64 / 19,624,712 B AArch64). The proposed caps are below measured origin/dev binaries and its existing caps. scripts/verify iterate passed: 997 workspace tests passed, 0 failed, 135 ignored; TypeScript protocol 37 passed, 0 failed. Transcript: verify-iterate.log. Committing this atomic two-file ratchet step next.

Cap-ratchet step staged on `size-ratchet-r2` at pre-commit head `36013759faf7aa85f8c0f6acebbb9b2683759097`: `scripts/verify.d/rust.sh` and `docs/PROCESS.md` now match exact rebased artifact sizes (21,455,472 B x86_64 / 19,624,712 B AArch64). The proposed caps are below measured `origin/dev` binaries and its existing caps. `scripts/verify iterate` passed: 997 workspace tests passed, 0 failed, 135 ignored; TypeScript protocol 37 passed, 0 failed. Transcript: [verify-iterate.log](https://git.kayg.org/attachments/3f93253a-a42f-4bc5-b6c6-0047703b61af). Committing this atomic two-file ratchet step next.
kayg commented 2026-10-15 22:27:47 +00:00
Author
Owner
Copy link

Final gate status at 6fd3dbcd70f29d1099d169a536d5e26da1f07bd5: scripts/verify fast is queued through the required build-slot wrapper. All four host build slots are occupied and the gate transcript has not been created; no final gate result is claimed. The command remains queued. No other dependency or source work is outstanding.

Final gate status at `6fd3dbcd70f29d1099d169a536d5e26da1f07bd5`: `scripts/verify fast` is queued through the required build-slot wrapper. All four host build slots are occupied and the gate transcript has not been created; no final gate result is claimed. The command remains queued. No other dependency or source work is outstanding.
kayg commented 2026-10-15 22:27:55 +00:00
Author
Owner
Copy link

Correction: the prior final-gate queue comment mistyped the full commit SHA. The correct size-ratchet-r2 head is 6fd3dbcd7bfcf2a05faf6a63d116c8f2c627f635; queue status is unchanged.

Correction: the prior final-gate queue comment mistyped the full commit SHA. The correct `size-ratchet-r2` head is `6fd3dbcd7bfcf2a05faf6a63d116c8f2c627f635`; queue status is unchanged.
kayg commented 2026-10-15 23:14:20 +00:00
Author
Owner
Copy link

Fast gate finding: infraternal_server::auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit reported FAILED during the full workspace suite at line 1267 of /home/kayg/.cache/codex-scratch/size-ratchet-r2/evidence/verify-fast-final.log. The gate is still running. After it finishes, I will run this host-load-sensitive auth socket case on the detached origin/dev baseline in the same build-slot/load window and record both outputs.

Fast gate finding: `infraternal_server::auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit` reported `FAILED` during the full workspace suite at line 1267 of `/home/kayg/.cache/codex-scratch/size-ratchet-r2/evidence/verify-fast-final.log`. The gate is still running. After it finishes, I will run this host-load-sensitive auth socket case on the detached `origin/dev` baseline in the same build-slot/load window and record both outputs.
kayg commented 2026-10-15 23:22:40 +00:00
Author
Owner
Copy link

Full fast gate transcript: verify-fast-final.log. Rust gate summary: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; test FAIL (101); cargo-deny PASS; static builds PASS. The only failing test is auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit; its assertion received error instead of resync. Baseline comparison remains queued on build-slot.

Full fast gate transcript: [verify-fast-final.log](https://git.kayg.org/attachments/919e8ca9-84ca-4ba4-9b82-1dd548593b62). Rust gate summary: fmt PASS; VT native fmt PASS; CLI plugin compile-out PASS; clippy PASS; test FAIL (101); cargo-deny PASS; static builds PASS. The only failing test is `auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit`; its assertion received `error` instead of `resync`. Baseline comparison remains queued on build-slot.
kayg commented 2026-10-16 00:02:49 +00:00
Author
Owner
Copy link

The allowed auth socket test did not reproduce in either isolated comparison. origin/dev passed 1/1 (10.76 s): dev-review-liveness.log. The branch passed 1/1 (11.35 s): branch-review-liveness-rerun.log. Since the full suite alone produced error instead of resync, I am rerunning the full fast gate on the branch head to verify the final result.

The allowed auth socket test did not reproduce in either isolated comparison. `origin/dev` passed 1/1 (10.76 s): [dev-review-liveness.log](https://git.kayg.org/attachments/fbaaa127-cf05-40ac-b116-4c7f09320ff2). The branch passed 1/1 (11.35 s): [branch-review-liveness-rerun.log](https://git.kayg.org/attachments/551c9f25-003a-4a41-be4c-402335fd785a). Since the full suite alone produced `error` instead of `resync`, I am rerunning the full fast gate on the branch head to verify the final result.
kayg commented 2026-10-16 00:21:05 +00:00
Author
Owner
Copy link

The second full fast gate passed on 6fd3dbcd7bfcf2a05faf6a63d116c8f2c627f635: Rust gate fmt, VT fmt, CLI compile-out, clippy, tests, cargo-deny and static builds all PASS; server tests were 449 passed / 0 failed / 47 ignored. Before push, origin/dev advanced from 40cc9c5be9b863ab23a92dfeca9e46cc726737aa to 6eaa5c413a98c1bfecd982b17cdbb1e77c86f169, leaving this branch 5 ahead / 1 behind. I am rebasing onto current origin/dev; release sizes and fast gate will be rerun on the final head.

The second full fast gate passed on `6fd3dbcd7bfcf2a05faf6a63d116c8f2c627f635`: Rust gate fmt, VT fmt, CLI compile-out, clippy, tests, cargo-deny and static builds all PASS; server tests were 449 passed / 0 failed / 47 ignored. Before push, `origin/dev` advanced from `40cc9c5be9b863ab23a92dfeca9e46cc726737aa` to `6eaa5c413a98c1bfecd982b17cdbb1e77c86f169`, leaving this branch 5 ahead / 1 behind. I am rebasing onto current `origin/dev`; release sizes and fast gate will be rerun on the final head.
kayg commented 2026-10-16 00:21:29 +00:00
Author
Owner
Copy link

Rebased size-ratchet-r2 onto current origin/dev 6eaa5c413a98c1bfecd982b17cdbb1e77c86f169 with no conflicts. New pre-measurement head: c1ffbe8132f154cb8284c5e24ef66083932cf531. The branch remains 5 commits ahead, with the same 11 changed paths; git diff --check passes. Rebuilding both exact release targets for dev and branch before updating caps or rerunning the final gate.

Rebased `size-ratchet-r2` onto current `origin/dev` `6eaa5c413a98c1bfecd982b17cdbb1e77c86f169` with no conflicts. New pre-measurement head: `c1ffbe8132f154cb8284c5e24ef66083932cf531`. The branch remains 5 commits ahead, with the same 11 changed paths; `git diff --check` passes. Rebuilding both exact release targets for dev and branch before updating caps or rerunning the final gate.
kayg commented 2026-10-16 00:26:37 +00:00
Author
Owner
Copy link

Exact release artifacts rebuilt after rebase onto origin/dev 6eaa5c413a98c1bfecd982b17cdbb1e77c86f169:

Revision x86_64 AArch64
dev 22,329,104 B 19,752,920 B
size-ratchet-r2 c1ffbe8132f154cb8284c5e24ef66083932cf531 21,455,472 B 19,624,712 B
branch delta −873,632 B −128,208 B

The branch remains below dev’s existing caps and retains exact caps at its measured sizes (21,455,472 / 19,624,712 B). Per-target logs and comparison receipt: dev x86, dev ARM, branch x86, branch ARM, comparison.

Exact release artifacts rebuilt after rebase onto `origin/dev` `6eaa5c413a98c1bfecd982b17cdbb1e77c86f169`: | Revision | x86_64 | AArch64 | | --- | ---: | ---: | | dev | 22,329,104 B | 19,752,920 B | | size-ratchet-r2 `c1ffbe8132f154cb8284c5e24ef66083932cf531` | 21,455,472 B | 19,624,712 B | | branch delta | −873,632 B | −128,208 B | The branch remains below dev’s existing caps and retains exact caps at its measured sizes (21,455,472 / 19,624,712 B). Per-target logs and comparison receipt: [dev x86](https://git.kayg.org/attachments/27789f80-656b-4e4e-a45b-87bc063c4104), [dev ARM](https://git.kayg.org/attachments/f881553e-3399-4e76-9de0-da2eb08c79bb), [branch x86](https://git.kayg.org/attachments/55c2fc5d-e70f-4fc6-8880-f936747164ea), [branch ARM](https://git.kayg.org/attachments/c58de8f2-3e4a-44fd-bce7-8dd998343d1d), [comparison](https://git.kayg.org/attachments/9e5aced8-3072-4038-8ba0-4d47ed449f1f).
kayg commented 2026-10-16 00:40:23 +00:00
Author
Owner
Copy link

Full scripts/verify fast passed on c1ffbe8132f154cb8284c5e24ef66083932cf531; transcript attached: verify-fast-rebased-final.log. Before push, a remote check found dev advanced to 492e1505ab6822078268344382f4d246d2c3d65e; the branch is now 27 commits behind. Rebasing and rerunning the size comparison and fast gate on the current dev tip before pushing.

Full `scripts/verify fast` passed on `c1ffbe8132f154cb8284c5e24ef66083932cf531`; transcript attached: [verify-fast-rebased-final.log](https://git.kayg.org/attachments/f8078c96-313b-4ade-8ffd-a90809fc5d74). Before push, a remote check found `dev` advanced to `492e1505ab6822078268344382f4d246d2c3d65e`; the branch is now 27 commits behind. Rebasing and rerunning the size comparison and fast gate on the current dev tip before pushing.
kayg commented 2026-10-16 00:40:50 +00:00
Author
Owner
Copy link

Rebased again onto current origin/dev 492e1505ab6822078268344382f4d246d2c3d65e (agent reconnect merge) with no conflicts. New branch head: aeab42a947d2a62027fc7caf2e855df4d7d0cecd; branch is 5 commits ahead and git diff --check passes. Current dev caps remain x86_64 22,204,304 B / AArch64 19,638,744 B. Rebuilding both exact release artifacts for dev and branch because the upstream merge includes runtime code changes.

Rebased again onto current `origin/dev` `492e1505ab6822078268344382f4d246d2c3d65e` (agent reconnect merge) with no conflicts. New branch head: `aeab42a947d2a62027fc7caf2e855df4d7d0cecd`; branch is 5 commits ahead and `git diff --check` passes. Current dev caps remain x86_64 22,204,304 B / AArch64 19,638,744 B. Rebuilding both exact release artifacts for dev and branch because the upstream merge includes runtime code changes.
kayg commented 2026-10-16 01:11:19 +00:00
Author
Owner
Copy link

Current origin/dev x86_64 exact release artifact measures 22,299,504 B (SHA-256 9b009a5c2bc6f4711995a052fa3b513846d95694a863727d3f2dfaed7e8bc710), 95,200 B above its existing 22,204,304 B cap. Receipt: dev-final-x86.txt. I’m measuring current dev AArch64 and the rebased branch before setting any branch cap; caps will not exceed dev’s measured artifacts.

Current `origin/dev` x86_64 exact release artifact measures 22,299,504 B (SHA-256 `9b009a5c2bc6f4711995a052fa3b513846d95694a863727d3f2dfaed7e8bc710`), 95,200 B above its existing 22,204,304 B cap. Receipt: [dev-final-x86.txt](https://git.kayg.org/attachments/3dac0bf9-a50b-4f9f-a0d6-7b013cb2803e). I’m measuring current dev AArch64 and the rebased branch before setting any branch cap; caps will not exceed dev’s measured artifacts.
kayg commented 2026-10-16 01:48:54 +00:00
Author
Owner
Copy link

Current origin/dev AArch64 exact release artifact measures 19,726,904 B (SHA-256 aa715a4108b205ec35ef4fb667c1efd088b6a4baca5ffd2366a5a70d5c64e254), 88,160 B above its existing 19,638,744 B cap. Receipt: dev-final-arm.txt. Current dev measures 22,299,504 B x86_64 and 19,726,904 B AArch64; both are below its preceding exact release build. Branch comparison is underway.

Current `origin/dev` AArch64 exact release artifact measures 19,726,904 B (SHA-256 `aa715a4108b205ec35ef4fb667c1efd088b6a4baca5ffd2366a5a70d5c64e254`), 88,160 B above its existing 19,638,744 B cap. Receipt: [dev-final-arm.txt](https://git.kayg.org/attachments/a5f24755-44de-49c7-bf4f-dee043d6d035). Current dev measures 22,299,504 B x86_64 and 19,726,904 B AArch64; both are below its preceding exact release build. Branch comparison is underway.
kayg commented 2026-10-16 01:55:01 +00:00
Author
Owner
Copy link

Rebased branch aeab42a947d2a62027fc7caf2e855df4d7d0cecd x86_64 exact release artifact measures 21,422,096 B (SHA-256 19429e3f801d46d62c9921bff6736cef1dfeded35fb6583ee1730a418f7bc66b), 877,408 B below current dev and 33,376 B below its previous 21,455,472 B cap. Receipt: branch-final-x86.txt. I will ratchet the cap to the measured size after the AArch64 comparison.

Rebased branch `aeab42a947d2a62027fc7caf2e855df4d7d0cecd` x86_64 exact release artifact measures 21,422,096 B (SHA-256 `19429e3f801d46d62c9921bff6736cef1dfeded35fb6583ee1730a418f7bc66b`), 877,408 B below current dev and 33,376 B below its previous 21,455,472 B cap. Receipt: [branch-final-x86.txt](https://git.kayg.org/attachments/f8316749-4f8b-492f-a236-8568ce55880a). I will ratchet the cap to the measured size after the AArch64 comparison.
kayg commented 2026-10-16 02:05:34 +00:00
Author
Owner
Copy link

Exact release measurements after rebasing onto origin/dev 492e1505ab6822078268344382f4d246d2c3d65e:

Revision x86_64 AArch64
dev 22,299,504 B 19,726,904 B
size-ratchet-r2 aeab42a947d2a62027fc7caf2e855df4d7d0cecd 21,422,096 B 19,594,856 B
branch delta −877,408 B −132,048 B

Both branch artifacts are below current dev and the old branch caps, so I’m lowering caps to the exact branch sizes. Receipts: dev x86, dev ARM, branch x86, branch ARM, comparison.

Exact release measurements after rebasing onto `origin/dev` `492e1505ab6822078268344382f4d246d2c3d65e`: | Revision | x86_64 | AArch64 | | --- | ---: | ---: | | dev | 22,299,504 B | 19,726,904 B | | size-ratchet-r2 `aeab42a947d2a62027fc7caf2e855df4d7d0cecd` | 21,422,096 B | 19,594,856 B | | branch delta | −877,408 B | −132,048 B | Both branch artifacts are below current dev and the old branch caps, so I’m lowering caps to the exact branch sizes. Receipts: [dev x86](https://git.kayg.org/attachments/cf11bc42-16d6-4097-bd84-13dc4322217e), [dev ARM](https://git.kayg.org/attachments/d5ccbc95-da01-442b-9cdd-79a7fc18db7e), [branch x86](https://git.kayg.org/attachments/a68a28a9-8554-4103-940b-6a733953483b), [branch ARM](https://git.kayg.org/attachments/e92bccd2-4a42-4170-9240-2b6ac4c41afa), [comparison](https://git.kayg.org/attachments/b1d22690-f4c5-40fd-856a-9eda9cf9158f).
kayg commented 2026-10-16 02:16:11 +00:00
Author
Owner
Copy link

Committed exact cap ratchet as 51fb6f939 (current head after rebasing on 492e1505ab6822078268344382f4d246d2c3d65e). Caps and PROCESS table are now x86_64 21,422,096 B / AArch64 19,594,856 B. bash -n and git diff --check passed; exact-size fixture and final fast gate are running/queued.

Committed exact cap ratchet as `51fb6f939` (current head after rebasing on `492e1505ab6822078268344382f4d246d2c3d65e`). Caps and PROCESS table are now x86_64 21,422,096 B / AArch64 19,594,856 B. `bash -n` and `git diff --check` passed; exact-size fixture and final fast gate are running/queued.
kayg commented 2026-10-16 02:35:28 +00:00
Author
Owner
Copy link

Rebased onto origin/dev at 492e1505ab and pushed size-ratchet-r2 with --force-with-lease. Head: 51fb6f939d.

Exact locked release artifacts:

Target origin/dev branch branch delta
x86_64-unknown-linux-musl 22,299,504 B 21,422,096 B -877,408 B
aarch64-unknown-linux-musl 19,726,904 B 19,594,856 B -132,048 B

The gate caps and PROCESS size table are set to the measured branch sizes. The caps remain below origin/dev's existing caps by 782,208 B and 43,888 B respectively.

Final scripts/verify fast output (full transcript attached):
(static builds: 3s)

+---------------------------+--------------+
| Rust gate | Result |
+---------------------------+--------------+
| fmt | PASS |
| VT native fmt | PASS |
| CLI plugin compile-out | PASS |
| clippy | PASS |
| test | PASS |
| cargo-deny | PASS |
| static builds | PASS |
+---------------------------+--------------+

x86_64-unknown-linux-musl: exact 21422096-byte cap PASS; 21422097 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19594856-byte cap PASS; 19594857 bytes rejected PASS; smaller artifact requires ratchet PASS

37 pass
0 fail
34463 expect() calls
Ran 37 tests across 10 files. [1.86s]

Full gate log: https://git.kayg.org/attachments/9bf2d095-8467-4e85-b92f-a7f3c96fe967

Rebased onto origin/dev at 492e1505ab6822078268344382f4d246d2c3d65e and pushed size-ratchet-r2 with --force-with-lease. Head: 51fb6f939da67b03923d9f79c358d0e003421e4b. Exact locked release artifacts: | Target | origin/dev | branch | branch delta | |---|---:|---:|---:| | x86_64-unknown-linux-musl | 22,299,504 B | 21,422,096 B | -877,408 B | | aarch64-unknown-linux-musl | 19,726,904 B | 19,594,856 B | -132,048 B | The gate caps and PROCESS size table are set to the measured branch sizes. The caps remain below origin/dev's existing caps by 782,208 B and 43,888 B respectively. Final scripts/verify fast output (full transcript attached): (static builds: 3s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ x86_64-unknown-linux-musl: exact 21422096-byte cap PASS; 21422097 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19594856-byte cap PASS; 19594857 bytes rejected PASS; smaller artifact requires ratchet PASS 37 pass 0 fail 34463 expect() calls Ran 37 tests across 10 files. [1.86s] Full gate log: https://git.kayg.org/attachments/9bf2d095-8467-4e85-b92f-a7f3c96fe967
kayg commented 2026-10-16 02:37:38 +00:00
Author
Owner
Copy link

Orchestrator: diff read (D264 owner-approved AES-GCM cut, Axum feature prune, cold plugin size, exact caps). Merged to dev as 9e84426c4. dev's static caps are green again: x86 21,422,096 B / ARM 19,594,856 B.

Orchestrator: diff read (D264 owner-approved AES-GCM cut, Axum feature prune, cold plugin size, exact caps). Merged to dev as **9e84426c4**. dev's static caps are green again: x86 21,422,096 B / ARM 19,594,856 B.
kayg commented 2026-10-28 17:53:13 +00:00
Author
Owner
Copy link

Closed by the orchestrator during the 2026-10-28 handover (#254), on the owner's request to close finished issues. Evidence: Merged to dev as 9e84426c4 (in dev and prod); the size caps are green again. Reopen if anything is still missing.

Closed by the orchestrator during the 2026-10-28 handover (#254), on the owner's request to close finished issues. Evidence: Merged to dev as 9e84426c4 (in dev and prod); the size caps are green again. Reopen if anything is still missing.
kayg closed this issue 2026-10-28 17:53:14 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
Labels
Clear labels   
launch-qa
Findings from launch QA.

No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#198
No description provided.