Second device stalls and terminal streams close with an invalid protocol frame at 60 windows #250

Open
opened 2026-10-20 15:01:36 +00:00 by kayg · 285 comments
Owner

Found while qualifying #243 (layout recovery). Inherited from production code; not caused by #243.

Symptom. The real-server browser test with 60 window memberships across two devices (desktop + phone) fails intermittently, about 1 in 2 isolated runs, on both the exact production-equivalent build (bd5ee1dd7 server + production UI) and the #243 fix head 90c7d4c2b:

  • phone stalls behind the server: phone revision 57 vs desktop 62 (55 of 60 windows); another run phone 70 / 170 vs server 196;
  • no page errors;
  • the server logs closes with "the terminal stream sent an invalid protocol frame" and "terminal shim disconnected".

Why it matters. A second device can silently stop receiving layout changes, and terminal streams close with a protocol error under many open windows. The owner's production account has 44+ windows.

Evidence (from #243):

Next: root cause (which frame is invalid and who sends it; why the layout stream stalls instead of resyncing), a deterministic reproduction, a fix, and the test made reliable.

Found while qualifying #243 (layout recovery). Inherited from production code; not caused by #243. **Symptom.** The real-server browser test with 60 window memberships across two devices (desktop + phone) fails intermittently, about 1 in 2 isolated runs, on both the exact production-equivalent build (bd5ee1dd7 server + production UI) and the #243 fix head 90c7d4c2b: - phone stalls behind the server: phone revision 57 vs desktop 62 (55 of 60 windows); another run phone 70 / 170 vs server 196; - no page errors; - the server logs closes with "the terminal stream sent an invalid protocol frame" and "terminal shim disconnected". **Why it matters.** A second device can silently stop receiving layout changes, and terminal streams close with a protocol error under many open windows. The owner's production account has 44+ windows. **Evidence** (from #243): - baseline log https://git.kayg.org/attachments/44d07ee8-04e8-4130-84b4-9d345455c989 - baseline diagnostic https://git.kayg.org/attachments/69f6a644-46bc-432e-a5d3-f3e0f394a15c - fixed-head runs https://git.kayg.org/attachments/885a4322-5104-485c-82e3-7ba72a418e35 and https://git.kayg.org/attachments/f8e4cfa3-4a8d-40e2-b770-0cc9e537b0bb Next: root cause (which frame is invalid and who sends it; why the layout stream stalls instead of resyncing), a deterministic reproduction, a fix, and the test made reliable.
1.5 KiB
8.6 KiB
430 KiB
433 KiB
2.1 KiB
Author
Owner

Starting #250 on branch sixty-window-stall, base 85b0285b733bac4c94d7540c58d4521d1a3410c4 (production line). Read #250 (no prior comments) and retrieving linked #243 history/evidence. Will reproduce the terminal frame failure and silent layout stall separately, add regression coverage, and qualify shipping static builds with ten consecutive before/after scale runs. No deployment.

Starting #250 on branch `sixty-window-stall`, base `85b0285b733bac4c94d7540c58d4521d1a3410c4` (production line). Read #250 (no prior comments) and retrieving linked #243 history/evidence. Will reproduce the terminal frame failure and silent layout stall separately, add regression coverage, and qualify shipping static builds with ten consecutive before/after scale runs. No deployment.
Author
Owner

Three deterministic production-code failures reproduced before product edits:

  • connection-unattached-close.test.ts: open a local stream on an already-welcomed socket, dispose it before its welcome microtask; browser emits Close(code1000) without any preceding AttachTerm. websocket.rs requires an attached stream for Close. Failing output.
  • terminal-fit-lifecycle.test.ts: 10000×10000 CSS box / 8×16 cells fits1250×625; server allows only500×300. Failing output. Actual scale-frame attribution remains pending.
  • server-store.test.ts:100 noncontiguous revision events followed by a worker-withdrawal event schedule no recovery at all. ServerCanvasStore.#event ignores anything rejected by LayoutJournal.accept, including error events and revision gaps. Failing output. Linked production diagnostic has phone at57 with no received layout event above57, whereas desktop receives snapshot62; this is absent delivery, not merely a rejected reducer operation.
    Baseline static build is running after staging the pinned compiler; no production source change yet, no benchmark claims.
Three deterministic production-code failures reproduced before product edits: - `connection-unattached-close.test.ts`: open a local stream on an already-welcomed socket, dispose it before its welcome microtask; browser emits Close(code1000) without any preceding AttachTerm. `websocket.rs` requires an attached stream for Close. [Failing output](https://git.kayg.org/attachments/b4d02ce2-f517-47c5-bb6a-daf7a25fa5f0). - `terminal-fit-lifecycle.test.ts`: 10000×10000 CSS box / 8×16 cells fits1250×625; server allows only500×300. [Failing output](https://git.kayg.org/attachments/c15285e8-2bbc-4b79-9fa1-e999c244b581). Actual scale-frame attribution remains pending. - `server-store.test.ts`:100 noncontiguous revision events followed by a worker-withdrawal event schedule no recovery at all. `ServerCanvasStore.#event` ignores anything rejected by `LayoutJournal.accept`, including error events and revision gaps. [Failing output](https://git.kayg.org/attachments/28140263-178b-43db-b3fb-58c2b58fd7c0). Linked production diagnostic has phone at57 with no received layout event above57, whereas desktop receives snapshot62; this is absent delivery, not merely a rejected reducer operation. Baseline static build is running after staging the pinned compiler; no production source change yet, no benchmark claims.
Author
Owner

Baseline shipping static x86_64 at85b0285b7:21,387,184 B, SHA256bc3e7b2fa2bde97d06b548981954a96d68f4a8524fed2b41a7c80d99348de58b. Original browser sources bundled separately before repair. On locked perf VM:ten consecutive unchanged sixty-membership cases passed10/10, but emitted171 invalid-protocol control Close frames and7073 transient shim-disconnected stream Close frames. Thus a passing outer assertion does not prove healthy terminal protocol. Full frame metadata + output. Initial harness attempts failed before reaching product code (CLI version discovery and runtime-path length); excluded from count. Corrected to pinned CLI and a private /run mount for root fixture isolation.

Actual trace attribution:browser sends ordinary Credit/Resize (80×24) already queued behind AttachTerm; host sends transient Close(1,terminal shim disconnected); websocket.rs1351–1374 removes the attachment but only inserts an ended-stream record for4404. The next queued Credit/Resize hits missing attachment and is blamed as an invalid frame, closing every stream and layout on that socket. This is separate from the newly found unbound browser Close and oversized-fit bugs. Native regression for the transient-close ordering is compiling before any native production edit. The scale spec refers all60 memberships to one PTY; shim session.rs39,575–577 has32 peer slots, while each attachment opens data and ownership peers (daemon.rs1169–1177), explaining the upstream pressure. No limit or engine change proposed.

Silent layout recovery reproduced deterministically against the same shipping server/browser:withdraw canvas plugin, restore it, commit view.update. Phone remains revision3 while server advances4; healthy socket never reconnects. Failing real-server test. Worker withdrawal uses Event type:error, ignored by the browser store; no future snapshot is requested. Same-ID resubscription with one250ms→5s timer will restore it without consuming additional server subscription slots.

Baseline shipping static x86_64 at85b0285b7:21,387,184 B, SHA256bc3e7b2fa2bde97d06b548981954a96d68f4a8524fed2b41a7c80d99348de58b. Original browser sources bundled separately before repair. On locked perf VM:ten consecutive unchanged sixty-membership cases passed10/10, but emitted171 invalid-protocol control Close frames and7073 transient shim-disconnected stream Close frames. Thus a passing outer assertion does not prove healthy terminal protocol. [Full frame metadata + output](https://git.kayg.org/attachments/d6d5ab86-91ba-47c4-929a-a135b38e0b40). Initial harness attempts failed before reaching product code (CLI version discovery and runtime-path length); excluded from count. Corrected to pinned CLI and a private /run mount for root fixture isolation. Actual trace attribution:browser sends ordinary Credit/Resize (80×24) already queued behind AttachTerm; host sends transient Close(1,terminal shim disconnected); websocket.rs1351–1374 removes the attachment but only inserts an ended-stream record for4404. The next queued Credit/Resize hits missing attachment and is blamed as an invalid frame, closing every stream and layout on that socket. This is separate from the newly found unbound browser Close and oversized-fit bugs. Native regression for the transient-close ordering is compiling before any native production edit. The scale spec refers all60 memberships to one PTY; shim session.rs39,575–577 has32 peer slots, while each attachment opens data and ownership peers (daemon.rs1169–1177), explaining the upstream pressure. No limit or engine change proposed. Silent layout recovery reproduced deterministically against the same shipping server/browser:withdraw canvas plugin, restore it, commit view.update. Phone remains revision3 while server advances4; healthy socket never reconnects. [Failing real-server test](https://git.kayg.org/attachments/29afe592-133f-41e7-a4c7-bb964608dcfc). Worker withdrawal uses Event type:error, ignored by the browser store; no future snapshot is requested. Same-ID resubscription with one250ms→5s timer will restore it without consuming additional server subscription slots.
Author
Owner

Completed/pushed e32d8284e:do not send Close for a local browser stream that never sent AttachTerm. Reuses existing writer bookkeeping and retains strict server validation. Exact isolated commit gate:tracer check +101 connection tests pass (389 assertions); original regression emitted one unbound Close, repaired code emits none. Gate. Native transient-close regression, same-ID layout recovery and shipping qualification remain in progress.

Completed/pushed e32d8284e:do not send Close for a local browser stream that never sent AttachTerm. Reuses existing writer bookkeeping and retains strict server validation. Exact isolated commit gate:tracer check +101 connection tests pass (389 assertions); original regression emitted one unbound Close, repaired code emits none. [Gate](https://git.kayg.org/attachments/22e4bd2d-e220-4811-adbb-87246d480eae). Native transient-close regression, same-ID layout recovery and shipping qualification remain in progress.
Author
Owner

Completed/pushed789dbede2:reusable disposable subscription handle now refreshes the same ID. Exact isolated gate:tracer check +102 connection tests pass;100 replacements keep one ID and one socket, disposal blocks further refreshes. Gate.
Native transient-close ordering reproduces before the production edit (failure); remembering every host-closed stream makes all3 native session-close tests pass (after). Native clippy/commit still pending.

Completed/pushed789dbede2:reusable disposable subscription handle now refreshes the same ID. Exact isolated gate:tracer check +102 connection tests pass;100 replacements keep one ID and one socket, disposal blocks further refreshes. [Gate](https://git.kayg.org/attachments/d461cebe-c4fe-4318-a226-dd0493cc84a7). Native transient-close ordering reproduces before the production edit ([failure](https://git.kayg.org/attachments/868a303b-c74a-4ede-92d2-a29ccb6ebe8c)); remembering every host-closed stream makes all3 native session-close tests pass ([after](https://git.kayg.org/attachments/71c21991-2053-4fd7-8e3d-2dc48a7f84d0)). Native clippy/commit still pending.
Author
Owner

Completed/pushed38e4317b2:native host closes now enter the existing bounded ended-stream set for transient and final closes. Unknown-stream validation and32-entry bound retained. Fmt, workspace all-target clippy and3 native authenticated socket controls pass.
Completed/pusheddaad6268e:layout errors/gaps/receipt high-water marks recover through same-ID resubscription, one coalesced250ms→5s timer, cleared by caught-up operations or a valid snapshot. Pending operations remain immutable across resubscription. Tracer check and20 focused store/sync tests pass (79 assertions). Tests.
Baseline performance on locked perf VM:full wire send-to-both-subscribers event p50/p99 at1,10,60 memberships=2.275/10.368,1.904/6.040,3.498/41.002 ms (200 samples/row,2 concurrent writers). Raw output. Credited50MiB LF output,3 runs=9.959,10.186,10.492 MiB/s; median10.186. Raw output. Earlier gesture benchmark produced no usable timing (remote move absent); native throughput first needed a private passwd/run namespace so its expected zsh fixture prompt was present. No shared system files changed.
Scope attribution:all8573 Resize frames in the first ten baseline runs had at most80 columns and42 rows. Oversized-fit mismatch is an adjacent finding, not #250's observed trigger; the exploratory size-clamp change/test has been removed from this branch. Root fixes preserve current rendering/geometry behavior.

Completed/pushed38e4317b2:native host closes now enter the existing bounded ended-stream set for transient and final closes. Unknown-stream validation and32-entry bound retained. Fmt, workspace all-target clippy and3 native authenticated socket controls pass. Completed/pusheddaad6268e:layout errors/gaps/receipt high-water marks recover through same-ID resubscription, one coalesced250ms→5s timer, cleared by caught-up operations or a valid snapshot. Pending operations remain immutable across resubscription. Tracer check and20 focused store/sync tests pass (79 assertions). [Tests](https://git.kayg.org/attachments/35661972-f463-4a57-8e94-9d0060798117). Baseline performance on locked perf VM:full wire send-to-both-subscribers event p50/p99 at1,10,60 memberships=2.275/10.368,1.904/6.040,3.498/41.002 ms (200 samples/row,2 concurrent writers). [Raw output](https://git.kayg.org/attachments/1a2811cc-f77a-4bcc-b978-7e2726fede8f). Credited50MiB LF output,3 runs=9.959,10.186,10.492 MiB/s; median10.186. [Raw output](https://git.kayg.org/attachments/bb3f01fd-7252-4cbf-9751-3f6051f24e90). Earlier gesture benchmark produced no usable timing (remote move absent); native throughput first needed a private passwd/run namespace so its expected zsh fixture prompt was present. No shared system files changed. Scope attribution:all8573 Resize frames in the first ten baseline runs had at most80 columns and42 rows. Oversized-fit mismatch is an adjacent finding, not #250's observed trigger; the exploratory size-clamp change/test has been removed from this branch. Root fixes preserve current rendering/geometry behavior.
Author
Owner

Strengthened60-membership gate on the same shipping baseline:0/10 pass when invalid-protocol socket closes are rejected. The original convergence-only gate was10/10 while emitting171 such closes; the stronger assertion is needed to expose the protocol failure reliably. No retry/timeout weakening. Ten failures.
Iteration gate passed fmt, VT fmt, CLI compile-out, clippy, runtime helper, inode fixture and cargo-deny, but the unchanged daemon_gone_tests fixture failed SUN_LEN:TMPDIR38 B + fixture/socket73 B=111 B. A private physical34-byte TMPDIR makes the exact socket107 B and the unchanged test passes. No source change/waiver; final fast will use the corrected root. Original gate, exact passing control.
Both-architecture same-recipe comparison is running:baseline aarch64 first, then repaired x86_64/aarch64 and production browser bundle. No deployment.
Contract documentation clarification proposed under the authorized recovery brief:after worker withdrawal/error, a skipped revision, or a receipt beyond the local canonical head, replace the same subscription ID to obtain a canonical snapshot. Coalesce retries with positive capped backoff, stop them when caught up, preserve immutable pending intents. Existing Subscribe/Event/Result shapes and authorization remain unchanged.

Strengthened60-membership gate on the same shipping baseline:0/10 pass when invalid-protocol socket closes are rejected. The original convergence-only gate was10/10 while emitting171 such closes; the stronger assertion is needed to expose the protocol failure reliably. No retry/timeout weakening. [Ten failures](https://git.kayg.org/attachments/486971d0-298a-4d85-90b7-2873a2175253). Iteration gate passed fmt, VT fmt, CLI compile-out, clippy, runtime helper, inode fixture and cargo-deny, but the unchanged daemon_gone_tests fixture failed SUN_LEN:TMPDIR38 B + fixture/socket73 B=111 B. A private physical34-byte TMPDIR makes the exact socket107 B and the unchanged test passes. No source change/waiver; final fast will use the corrected root. [Original gate](https://git.kayg.org/attachments/550f1d28-e4ee-4e85-afb2-b46229cae15a), [exact passing control](https://git.kayg.org/attachments/2f81636f-b27a-40fe-9fab-9cad32c39587). Both-architecture same-recipe comparison is running:baseline aarch64 first, then repaired x86_64/aarch64 and production browser bundle. No deployment. Contract documentation clarification proposed under the authorized recovery brief:after worker withdrawal/error, a skipped revision, or a receipt beyond the local canonical head, replace the same subscription ID to obtain a canonical snapshot. Coalesce retries with positive capped backoff, stop them when caught up, preserve immutable pending intents. Existing Subscribe/Event/Result shapes and authorization remain unchanged.
Author
Owner

Also clarifying the existing nonzero Close rule in contracts/wire.md:after any host/server stream Close, discard already-in-flight terminal input/credit/resize until browser Close or reattach; keep the existing bounded retirement set and strict unknown-stream admission. Local browser stream registration alone does not open a wire stream. No frame encoding, field, limit or authorization changes. This documents the #250 race fix rather than changing a foundational choice.

Also clarifying the existing nonzero Close rule in contracts/wire.md:after any host/server stream Close, discard already-in-flight terminal input/credit/resize until browser Close or reattach; keep the existing bounded retirement set and strict unknown-stream admission. Local browser stream registration alone does not open a wire stream. No frame encoding, field, limit or authorization changes. This documents the #250 race fix rather than changing a foundational choice.
Author
Owner

Continuation start on sixty-window-stall-cont, base/head 32a98b1ebb84a575d633987b383c8501e3e1d266 (continuing sixty-window-stall). Read all 8 #250 comments and retrieved all 233 parent #243 comments. Retaining existing fixes and baseline receipts. Will replace the WIP test commit, complete the subscription-contract clarification, repeat strict shipping-static baseline/head qualification, measure after-results on the named locked perf VM, compare both static architectures with 85b0285b7, and run final fast with a short private TMPDIR. Push each atomic commit; no deploy.

Continuation start on `sixty-window-stall-cont`, base/head `32a98b1ebb84a575d633987b383c8501e3e1d266` (continuing `sixty-window-stall`). Read all 8 #250 comments and retrieved all 233 parent #243 comments. Retaining existing fixes and baseline receipts. Will replace the WIP test commit, complete the subscription-contract clarification, repeat strict shipping-static baseline/head qualification, measure after-results on the named locked perf VM, compare both static architectures with 85b0285b7, and run final fast with a short private TMPDIR. Push each atomic commit; no deploy.
Author
Owner

Completed/pushed b20db48bc: clarified same-ID subscription generation replacement and healthy-socket withdrawal recovery in contracts/plugin.md §5. contracts/wire.md already contains both proposed #250 clarifications from 78e39de06 (§4 and Account canvas layout); retained them. No frame, field, limit or authorization change. Documentation gate: cargo fmt --all -- --check and git diff --check exit 0. Strict tracer/spec type checks and 86 focused connection/layout tests also pass; shipping comparison and strict ten-run baseline are active.

Completed/pushed b20db48bc: clarified same-ID subscription generation replacement and healthy-socket withdrawal recovery in contracts/plugin.md §5. contracts/wire.md already contains both proposed #250 clarifications from 78e39de06 (§4 and Account canvas layout); retained them. No frame, field, limit or authorization change. Documentation gate: cargo fmt --all -- --check and git diff --check exit 0. Strict tracer/spec type checks and 86 focused connection/layout tests also pass; shipping comparison and strict ten-run baseline are active.
Author
Owner

Fresh strict shipping-baseline qualification (85b0285b7 binary + original production UI): 0/10 pass, retries=0, on locked infraternal-perf-test (4 CPUs), load 0.07/0.20/0.53 initially. All ten reach the protocol-close assertion. Per-run invalid-protocol control Close / all invalid-protocol Close / transient shim-disconnect Close counts:

  • Run 1: 13 / 13 / 683.
  • Run 2: 15 / 15 / 714.
  • Run 3: 20 / 20 / 807.
  • Run 4: 11 / 11 / 690.
  • Run 5: 17 / 17 / 653.
  • Run 6: 16 / 16 / 760.
  • Run 7: 18 / 18 / 736.
  • Run 8: 19 / 19 / 636.
  • Run 9: 15 / 15 / 701.
  • Run 10: 11 / 11 / 670.

Totals: 155 control protocol closes, 7050 transient closes. The fixture now retains every Close, independently of timing traces, so an earlier close cannot be hidden by a later one. Head comparison pending; no retry or timeout weakening.

baseline-counts.json
baseline-ten.log

Fresh strict shipping-baseline qualification (85b0285b7 binary + original production UI): 0/10 pass, retries=0, on locked infraternal-perf-test (4 CPUs), load 0.07/0.20/0.53 initially. All ten reach the protocol-close assertion. Per-run invalid-protocol control Close / all invalid-protocol Close / transient shim-disconnect Close counts: - Run 1: 13 / 13 / 683. - Run 2: 15 / 15 / 714. - Run 3: 20 / 20 / 807. - Run 4: 11 / 11 / 690. - Run 5: 17 / 17 / 653. - Run 6: 16 / 16 / 760. - Run 7: 18 / 18 / 736. - Run 8: 19 / 19 / 636. - Run 9: 15 / 15 / 701. - Run 10: 11 / 11 / 670. Totals: 155 control protocol closes, 7050 transient closes. The fixture now retains every Close, independently of timing traces, so an earlier close cannot be hidden by a later one. Head comparison pending; no retry or timeout weakening. [baseline-counts.json](https://git.kayg.org/attachments/ddc9ff52-5838-4fe1-a0d8-c999960c6049) [baseline-ten.log](https://git.kayg.org/attachments/4df2201c-1394-4f86-bf10-e44c1ef34068)
Author
Owner

Both-architecture shipping comparison complete, same scripts/static-cargo --locked --release recipe against 85b0285b7: x86_64 baseline/head 21,387,184 / 21,387,184 B (+0); aarch64 19,559,112 / 19,559,112 B (+0). Rebuilt x86 baseline is byte-identical to the original receipt (bc3e7b2f…). Hashes for all four files are attached. Exact D243 caps remain unchanged. Production tracer build + transfer-budget check exit 0. No dependency, feature, profile or migration change. Head real-server controls and final fast are active.

static-sizes.json
build-compare.log

Both-architecture shipping comparison complete, same scripts/static-cargo --locked --release recipe against 85b0285b7: x86_64 baseline/head 21,387,184 / 21,387,184 B (+0); aarch64 19,559,112 / 19,559,112 B (+0). Rebuilt x86 baseline is byte-identical to the original receipt (bc3e7b2f…). Hashes for all four files are attached. Exact D243 caps remain unchanged. Production tracer build + transfer-budget check exit 0. No dependency, feature, profile or migration change. Head real-server controls and final fast are active. [static-sizes.json](https://git.kayg.org/attachments/10e10c3a-b1b2-493a-9f6d-06f63c35b159) [build-compare.log](https://git.kayg.org/attachments/704a0777-7942-444a-9279-c9c929a5e191)
Author
Owner

Completed/pushed 8f2930350: replaces the saved WIP with the atomic real-server test commit. The shared harness retains every Close when requested, the scale gate explicitly enables decoding and rejects all protocol closes, and unique per-run receipts retain counts. Includes the same-socket subscription withdrawal control and event benchmark used by the baseline. Shipping static head + production UI: 2/2 controls pass (strict sixty memberships; withdrawal/catch-up without another socket). Strict tracer/spec types, 86 focused tests, fmt and diff checks pass.

Ten consecutive strict head runs and final fast are active. The final head tree matches the source tree captured at gate start exactly; no source edits since qualification started.

sanity.log
ts-check.log
focused-tests.log

Completed/pushed 8f2930350: replaces the saved WIP with the atomic real-server test commit. The shared harness retains every Close when requested, the scale gate explicitly enables decoding and rejects all protocol closes, and unique per-run receipts retain counts. Includes the same-socket subscription withdrawal control and event benchmark used by the baseline. Shipping static head + production UI: 2/2 controls pass (strict sixty memberships; withdrawal/catch-up without another socket). Strict tracer/spec types, 86 focused tests, fmt and diff checks pass. Ten consecutive strict head runs and final fast are active. The final head tree matches the source tree captured at gate start exactly; no source edits since qualification started. [sanity.log](https://git.kayg.org/attachments/ef2cefcb-0624-495a-9fbb-fb081b76bbe1) [ts-check.log](https://git.kayg.org/attachments/47596ba0-c14c-4d8a-b7e4-192ca01bc48e) [focused-tests.log](https://git.kayg.org/attachments/aaee356c-90ad-47e7-9914-4461c6efc8be)
Author
Owner

Head 8f2930350 shipping static + production tracer: strict sixty-membership gate 10/10 pass in a row, retries=0. Baseline 85b0285b7 was 0/10. Per-run invalid-protocol control Close / all invalid-protocol Close / transient shim-disconnect Close counts:

  • Run 1: 0 / 0 / 698; desktop/phone revision 196/196.
  • Run 2: 0 / 0 / 683; desktop/phone revision 196/196.
  • Run 3: 0 / 0 / 740; desktop/phone revision 196/196.
  • Run 4: 0 / 0 / 729; desktop/phone revision 196/196.
  • Run 5: 0 / 0 / 680; desktop/phone revision 196/196.
  • Run 6: 0 / 0 / 711; desktop/phone revision 196/196.
  • Run 7: 0 / 0 / 690; desktop/phone revision 196/196.
  • Run 8: 0 / 0 / 690; desktop/phone revision 196/196.
  • Run 9: 0 / 0 / 686; desktop/phone revision 196/196.
  • Run 10: 0 / 0 / 721; desktop/phone revision 196/196.

Totals: 0 protocol closes, 7028 transient closes; 0 page errors. Baseline totals: 155 control protocol closes, 7,050 transient closes. Transient pressure remains expected in this deliberate 60-memberships-to-one-PTY fixture (the shim has 32 peer slots, as recorded above); it no longer ends sibling streams or strands layout. Both devices finish canonical revision 196 on every head run. Screenshots are attached for owner review; no visual-quality rating.

head-counts.json
head-ten.log
review-sixty-desktop.png
review-sixty-phone.png

Head 8f2930350 shipping static + production tracer: strict sixty-membership gate 10/10 pass in a row, retries=0. Baseline 85b0285b7 was 0/10. Per-run invalid-protocol control Close / all invalid-protocol Close / transient shim-disconnect Close counts: - Run 1: 0 / 0 / 698; desktop/phone revision 196/196. - Run 2: 0 / 0 / 683; desktop/phone revision 196/196. - Run 3: 0 / 0 / 740; desktop/phone revision 196/196. - Run 4: 0 / 0 / 729; desktop/phone revision 196/196. - Run 5: 0 / 0 / 680; desktop/phone revision 196/196. - Run 6: 0 / 0 / 711; desktop/phone revision 196/196. - Run 7: 0 / 0 / 690; desktop/phone revision 196/196. - Run 8: 0 / 0 / 690; desktop/phone revision 196/196. - Run 9: 0 / 0 / 686; desktop/phone revision 196/196. - Run 10: 0 / 0 / 721; desktop/phone revision 196/196. Totals: 0 protocol closes, 7028 transient closes; 0 page errors. Baseline totals: 155 control protocol closes, 7,050 transient closes. Transient pressure remains expected in this deliberate 60-memberships-to-one-PTY fixture (the shim has 32 peer slots, as recorded above); it no longer ends sibling streams or strands layout. Both devices finish canonical revision 196 on every head run. Screenshots are attached for owner review; no visual-quality rating. [head-counts.json](https://git.kayg.org/attachments/38f490b4-a561-4855-918e-0d5a27ecb0b2) [head-ten.log](https://git.kayg.org/attachments/52234af1-34d9-4d2e-b2d6-1c9efb15eedf) ![review-sixty-desktop.png](https://git.kayg.org/attachments/ed760f2f-9036-483a-8037-cffa46c07405) ![review-sixty-phone.png](https://git.kayg.org/attachments/1259dcc5-955c-4124-be2a-e343cade7279)
Author
Owner

Perf VM after-measurements complete on infraternal-perf-test, x86_64, 4 CPUs; every run held the shared lock, with no detached measurement process. Same 200-event/two-writer benchmark at 1/10/60 memberships; p50/p99 ms:

Memberships Original baseline First head after Paired baseline Paired head
1 2.275 / 10.368 2.979 / 11.401 2.672 / 22.598 2.880 / 12.142
10 1.904 / 6.040 2.967 / 11.104 3.021 / 10.148 3.040 / 11.983
60 3.498 / 41.002 4.773 / 15.462 4.284 / 23.223 5.878 / 43.687

Recorded load averages: original event baseline 0.26/0.67/0.52→0.37/0.68/0.52; first head 3.01/2.13/1.07→3.26/2.21/1.11. Paired control started baseline at1.04/1.76/1.03 and head at1.33/1.80/1.05. Retain all samples; these do not establish a latency improvement.

Credited 50 MiB LF output, credit batch65536, 3 runs (same original recipe): paired baseline8.353,8.708,8.161 MiB/s (median8.353); paired head8.300,8.128,7.842 (median8.128). Original saved baseline was9.959,10.186,10.492 (median10.186). Paired output load baseline0.68/1.57/1.01; head1.07/1.60/1.03. Both current binaries are below D41's10 MB/s (9.537 MiB/s) budget; performance is not qualified by this window. The first head attempt used an additional budget assertion and stopped after8.733 MiB/s; its failure is attached, then the exact original three-run recipe was used for both binaries. No benchmark threshold or production source was changed. The common baseline slowdown is recorded, not waived or attributed to this fix.

Final fast is now in workspace tests; all earlier rows have passed so far.

performance-summary.json
events-after.log
events-paired.log
throughput-after.log
throughput-paired.log

Perf VM after-measurements complete on infraternal-perf-test, x86_64, 4 CPUs; every run held the shared lock, with no detached measurement process. Same 200-event/two-writer benchmark at 1/10/60 memberships; p50/p99 ms: | Memberships | Original baseline | First head after | Paired baseline | Paired head | |---|---|---|---|---| | 1 | 2.275 / 10.368 | 2.979 / 11.401 | 2.672 / 22.598 | 2.880 / 12.142 | | 10 | 1.904 / 6.040 | 2.967 / 11.104 | 3.021 / 10.148 | 3.040 / 11.983 | | 60 | 3.498 / 41.002 | 4.773 / 15.462 | 4.284 / 23.223 | 5.878 / 43.687 | Recorded load averages: original event baseline 0.26/0.67/0.52→0.37/0.68/0.52; first head 3.01/2.13/1.07→3.26/2.21/1.11. Paired control started baseline at1.04/1.76/1.03 and head at1.33/1.80/1.05. Retain all samples; these do not establish a latency improvement. Credited 50 MiB LF output, credit batch65536, 3 runs (same original recipe): paired baseline8.353,8.708,8.161 MiB/s (median8.353); paired head8.300,8.128,7.842 (median8.128). Original saved baseline was9.959,10.186,10.492 (median10.186). Paired output load baseline0.68/1.57/1.01; head1.07/1.60/1.03. Both current binaries are below D41's10 MB/s (9.537 MiB/s) budget; performance is not qualified by this window. The first head attempt used an additional budget assertion and stopped after8.733 MiB/s; its failure is attached, then the exact original three-run recipe was used for both binaries. No benchmark threshold or production source was changed. The common baseline slowdown is recorded, not waived or attributed to this fix. Final fast is now in workspace tests; all earlier rows have passed so far. [performance-summary.json](https://git.kayg.org/attachments/d697f49c-82fc-4bdc-9537-d6c517fbd472) [events-after.log](https://git.kayg.org/attachments/e1a35791-b976-4aed-bd0c-f8e96150eafb) [events-paired.log](https://git.kayg.org/attachments/947b83c0-e7a0-4f46-97c5-a4e785d0eb0e) [throughput-after.log](https://git.kayg.org/attachments/a3696fa1-ffb3-4dc3-bcd2-bade877ba102) [throughput-paired.log](https://git.kayg.org/attachments/ef9c34a9-6d7c-48a0-9d8b-105c3a9d9e95)
Author
Owner

First final fast on 8f2930350 exited1: all9 Rust gate rows PASS, including workspace tests and both static targets. Two TypeScript property tests could not start their real Rust layout oracle: the shared sccache daemon tried to create compiler temporary directories under removed /home/kayg/.cache/codex-scratch/q9 (ENOENT). No reducer comparison ran, and no source change is made.

Using a job-specific SCCACHE_SERVER_UDS socket with this job's physical TMPDIR instead; caching remains enabled. The shared daemon and its former directory are untouched. Rechecking the two exact oracle tests through the build slot, then rerunning the complete fast gate.

fast-attempt-1.log
ts-gate-failures.txt

First final fast on 8f2930350 exited1: all9 Rust gate rows PASS, including workspace tests and both static targets. Two TypeScript property tests could not start their real Rust layout oracle: the shared sccache daemon tried to create compiler temporary directories under removed /home/kayg/.cache/codex-scratch/q9 (ENOENT). No reducer comparison ran, and no source change is made. Using a job-specific SCCACHE_SERVER_UDS socket with this job's physical TMPDIR instead; caching remains enabled. The shared daemon and its former directory are untouched. Rechecking the two exact oracle tests through the build slot, then rerunning the complete fast gate. [fast-attempt-1.log](https://git.kayg.org/attachments/e0de1c36-fe0d-4aee-b931-ed9d940f7fc8) [ts-gate-failures.txt](https://git.kayg.org/attachments/9c2fc03e-1dec-498b-bd25-36e336404000)
Author
Owner

Compiler-cache isolation control completed on unchanged 8f2930350: both exact real Rust reducer oracle property tests pass, 8,192 generated operations, zero divergences. A job-specific Unix socket selects a separate sccache daemon with this job's stable physical TMPDIR; the shared cache store remains enabled and the shared daemon was not stopped or changed. No repository source change. Full scripts/verify fast rerun is active on the same pushed head.

oracle-recheck.log

Compiler-cache isolation control completed on unchanged 8f2930350: both exact real Rust reducer oracle property tests pass, 8,192 generated operations, zero divergences. A job-specific Unix socket selects a separate sccache daemon with this job's stable physical TMPDIR; the shared cache store remains enabled and the shared daemon was not stopped or changed. No repository source change. Full scripts/verify fast rerun is active on the same pushed head. [oracle-recheck.log](https://git.kayg.org/attachments/371a9826-fe80-4947-a956-5c1639a78c06)
Author
Owner

Finished continuation on sixty-window-stall-cont, pushed HEAD 8f29303503fbf2fb67e6ec4454aefb8397d61caf (fix base 85b0285b733bac4c94d7540c58d4521d1a3410c4). Worktree clean; no deploy; issue stays open.

Contract documentation is complete: existing wire §4 / Account canvas layout rules retained, plugin subscription replacement clarified in b20db48bc. WIP replaced by atomic test commit8f2930350. No frame, field, limit, authorization, dependency or migration change.

Shipping static + production UI strict scale qualification: baseline0/10, head10/10 consecutively, retries0. Invalid-protocol control closes155→0; all head protocol closes0. Transient shim-disconnect closes7050→7028 remain expected for60 memberships referring to one PTY; both devices end revision196 in every head run, page errors0. Same-socket worker-withdrawal recovery passes. Raw per-run receipts:

baseline-receipts.tar.gz
head-receipts.tar.gz

D243 same-recipe baseline/head sizes: x86_64 21,387,184/21,387,184 B; aarch64 19,559,112/19,559,112 B. Delta +0/+0. Final fast shipping files match the benchmarked hashes exactly.

Performance qualification remains incomplete: paired credited50 MiB LF throughput baseline8.353/8.708/8.161 MiB/s, head8.300/8.128/7.842; medians8.353/8.128. Both below D41's10 MB/s budget in this VM window. All original/after/paired event p50/p99 samples, load averages and the initial budget-check failure are preserved in the performance comment above; no performance pass or latency improvement is claimed.

Final scripts/verify fast EXIT0 on this exact head. Successful environment used a private physical34-byte TMPDIR/state root, the built recovery-helper, RUST_TEST_THREADS=1, TRACER_TEST_PORT=4798 and a job-specific SCCACHE_SERVER_UDS; caching stayed enabled. The earlier shared-daemon ENOENT is resolved without touching that daemon. Verbatim gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.38s]

scripts/verify fast exit=0

fast.log
final-gate-summary.txt
final-state.json

Self-review completed. No remaining job binary processes; private compiler cache stopped; local build target, shipping copies and runtime roots plus perf-VM temporary files removed. Evidence retained outside the checkout and attached:

final-self-review.md
local-cleanup.json
vm-cleanup.json

Finished continuation on `sixty-window-stall-cont`, pushed HEAD `8f29303503fbf2fb67e6ec4454aefb8397d61caf` (fix base `85b0285b733bac4c94d7540c58d4521d1a3410c4`). Worktree clean; no deploy; issue stays open. Contract documentation is complete: existing wire §4 / Account canvas layout rules retained, plugin subscription replacement clarified in b20db48bc. WIP replaced by atomic test commit8f2930350. No frame, field, limit, authorization, dependency or migration change. Shipping static + production UI strict scale qualification: baseline0/10, head10/10 consecutively, retries0. Invalid-protocol control closes155→0; all head protocol closes0. Transient shim-disconnect closes7050→7028 remain expected for60 memberships referring to one PTY; both devices end revision196 in every head run, page errors0. Same-socket worker-withdrawal recovery passes. Raw per-run receipts: [baseline-receipts.tar.gz](https://git.kayg.org/attachments/fafa5e3a-495e-441e-9cf1-fa9a991165cd) [head-receipts.tar.gz](https://git.kayg.org/attachments/b7e6a668-5b47-4f45-9667-e836fcdcbe69) D243 same-recipe baseline/head sizes: x86_64 21,387,184/21,387,184 B; aarch64 19,559,112/19,559,112 B. Delta +0/+0. Final fast shipping files match the benchmarked hashes exactly. Performance qualification remains incomplete: paired credited50 MiB LF throughput baseline8.353/8.708/8.161 MiB/s, head8.300/8.128/7.842; medians8.353/8.128. Both below D41's10 MB/s budget in this VM window. All original/after/paired event p50/p99 samples, load averages and the initial budget-check failure are preserved in the performance comment above; no performance pass or latency improvement is claimed. Final `scripts/verify fast` EXIT0 on this exact head. Successful environment used a private physical34-byte TMPDIR/state root, the built recovery-helper, RUST_TEST_THREADS=1, TRACER_TEST_PORT=4798 and a job-specific SCCACHE_SERVER_UDS; caching stayed enabled. The earlier shared-daemon ENOENT is resolved without touching that daemon. Verbatim gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.38s] scripts/verify fast exit=0 ``` [fast.log](https://git.kayg.org/attachments/4859f17d-7161-4589-9473-69f42547391c) [final-gate-summary.txt](https://git.kayg.org/attachments/2951799f-62eb-43d6-8e3d-aad44b4140d4) [final-state.json](https://git.kayg.org/attachments/dcccd9be-50f9-4b12-940b-61d706bfce7c) Self-review completed. No remaining job binary processes; private compiler cache stopped; local build target, shipping copies and runtime roots plus perf-VM temporary files removed. Evidence retained outside the checkout and attached: [final-self-review.md](https://git.kayg.org/attachments/60f2ae94-64e0-42fa-85c2-d33e0adc5fe6) [local-cleanup.json](https://git.kayg.org/attachments/2159c63d-3872-4e49-8a86-3f1ebd24daf6) [vm-cleanup.json](https://git.kayg.org/attachments/4869ed7b-a495-45bd-9fdf-7da13bf6bd40)
Author
Owner

Verification review start: branch review-sixty-window-stall, requested base/head 8f29303503fbf2fb67e6ec4454aefb8397d61caf, production comparison 85b0285b733bac4c94d7540c58d4521d1a3410c4. Worktree initially held superseded WIP 32a98b1eb; aligned clean branch to requested head. Reading #250 and parent #243 history; preserving prior author receipts. Test-only review; no product edits or deploy. Will verify bounded retirement, unknown/reused IDs, layout retry/pending ordering, strict scale evidence, static size and interleaved six-pair credited output on named perf VM.

Verification review start: branch `review-sixty-window-stall`, requested base/head `8f29303503fbf2fb67e6ec4454aefb8397d61caf`, production comparison `85b0285b733bac4c94d7540c58d4521d1a3410c4`. Worktree initially held superseded WIP 32a98b1eb; aligned clean branch to requested head. Reading #250 and parent #243 history; preserving prior author receipts. Test-only review; no product edits or deploy. Will verify bounded retirement, unknown/reused IDs, layout retry/pending ordering, strict scale evidence, static size and interleaved six-pair credited output on named perf VM.
Author
Owner

Review step pushed: 132e66d05 adds test-only coverage for ordered pending inputs/stale receipts across three replacements and for sixty persistently withdrawn subscriptions. Focused browser tests:85 pass,0 fail,253 assertions; tracer type check exit0. Virtual scheduling produces15 refreshes/subscriber in the first minute (900 requests total), then12 requests/s across60 independent subscribers. Snapshots stop every recovery timer. This is a scheduling/request-count result, not host performance timing; real UI stores are per account/device rather than per window.

Bound inspection:the ended-stream set refuses its33rd distinct entry; it does not evict. Unknown IDs are not absorbed; reattach/Close remove the entry before normal validation. Existing native32-writer cap and browser28-writer rotation bound valid unique stream IDs per socket. Authenticated socket/overflow controls and final gate are waiting for a host build slot; no product edits or deploy.

Review step pushed: `132e66d05` adds test-only coverage for ordered pending inputs/stale receipts across three replacements and for sixty persistently withdrawn subscriptions. Focused browser tests:85 pass,0 fail,253 assertions; tracer type check exit0. Virtual scheduling produces15 refreshes/subscriber in the first minute (900 requests total), then12 requests/s across60 independent subscribers. Snapshots stop every recovery timer. This is a scheduling/request-count result, not host performance timing; real UI stores are per account/device rather than per window. Bound inspection:the ended-stream set refuses its33rd distinct entry; it does not evict. Unknown IDs are not absorbed; reattach/Close remove the entry before normal validation. Existing native32-writer cap and browser28-writer rotation bound valid unique stream IDs per socket. Authenticated socket/overflow controls and final gate are waiting for a host build slot; no product edits or deploy.
Author
Owner

P1 review finding: closeStream still emits an unbound Close during reconnect. connection.ts:245 checks retained writersUsed; that set survives a resumed connection, while server attachments are per socket (websocket.rs:631,2126). Reproduction: attach window on socket A, retain sibling, reconnect/send Hello on socket B, dispose first window before its replacement AttachTerm. B emits1 Close and0 AttachTerm for the removed window. Strict server handling returns an error for the missing attachment and ends the shared socket.

Test-only regression is committed/pushed on review-sixty-window-stall; original never-attached control passes, reconnect case fails (1 pass,1 fail,6 assertions). This is a remaining #250 ordering case; production also sent Close here, so no claim that the branch newly introduced it. Repair should distinguish current-socket attachment from retained writer identity and preserve strict unknown-stream validation. No product edits.

reconnect-close.log

P1 review finding: `closeStream` still emits an unbound Close during reconnect. `connection.ts:245` checks retained `writersUsed`; that set survives a resumed connection, while server attachments are per socket (`websocket.rs:631,2126`). Reproduction: attach window on socket A, retain sibling, reconnect/send Hello on socket B, dispose first window before its replacement AttachTerm. B emits1 Close and0 AttachTerm for the removed window. Strict server handling returns an error for the missing attachment and ends the shared socket. Test-only regression is committed/pushed on `review-sixty-window-stall`; original never-attached control passes, reconnect case fails (1 pass,1 fail,6 assertions). This is a remaining #250 ordering case; production also sent Close here, so no claim that the branch newly introduced it. Repair should distinguish current-socket attachment from retained writer identity and preserve strict unknown-stream validation. No product edits. [reconnect-close.log](https://git.kayg.org/attachments/6d278f66-ef60-46e6-a011-a93b1a8a6dd2)
Author
Owner

Review status:confirmed P1 reconnect Close regression committed/pushed as 776d4996a; tracer types pass. Production control confirms it is inherited (production0/2 controls vs head1/2). Native controls are written/formatted but remain uncommitted until their checks run. The host build-slot wrapper has not acquired a slot since18:51 CEST; at19:08 its three configured slots are held by release-9, app-windows-r6 and readd-minimal-r3. Continuing to wait; no slots, jobs or host settings changed. Static artifacts, interleaved perf-VM measurements and final fast are pending this shared build capacity.

Review status:confirmed P1 reconnect Close regression committed/pushed as `776d4996a`; tracer types pass. Production control confirms it is inherited (production0/2 controls vs head1/2). Native controls are written/formatted but remain uncommitted until their checks run. The host build-slot wrapper has not acquired a slot since18:51 CEST; at19:08 its three configured slots are held by release-9, app-windows-r6 and readd-minimal-r3. Continuing to wait; no slots, jobs or host settings changed. Static artifacts, interleaved perf-VM measurements and final fast are pending this shared build capacity.
Author
Owner

Independent strict production scale control:0/10 passes, retries0, on locked infraternal-perf-test (4 cores). All10 receipts reach canonical revision196 on both devices and contain protocol closes; total145 protocol closes,0 page errors. This verifies the strengthened assertion rather than a fixture-startup failure. Reused saved production binary SHA256bc3e7b2f… (21,387,184 B) and its saved production bundle, copied into this review’s private VM directory; original artifacts unchanged. Fresh same-recipe build comparison is still running on the host. Review head remains776d4996a; no product edits.

baseline-counts.json
baseline-ten.log
baseline-receipts.tar.gz

Independent strict production scale control:0/10 passes, retries0, on locked infraternal-perf-test (4 cores). All10 receipts reach canonical revision196 on both devices and contain protocol closes; total145 protocol closes,0 page errors. This verifies the strengthened assertion rather than a fixture-startup failure. Reused saved production binary SHA256bc3e7b2f… (21,387,184 B) and its saved production bundle, copied into this review’s private VM directory; original artifacts unchanged. Fresh same-recipe build comparison is still running on the host. Review head remains776d4996a; no product edits. [baseline-counts.json](https://git.kayg.org/attachments/fe7e304c-ee58-48ba-a1c9-9b2e5e920de5) [baseline-ten.log](https://git.kayg.org/attachments/18c284c9-910c-4e92-b080-00315ffa06f4) [baseline-receipts.tar.gz](https://git.kayg.org/attachments/d12f0e36-9b61-4632-9144-888904784266)
Author
Owner

Native review controls committed/pushed separately: ea6f370129f9151f93b932299a226f388af27e05 (retirement scope/reuse/overflow unit controls), 6c8af9e9c1b7ce83eee0eb9b3a48abbfa6c624b1 (authenticated socket unknown-stream/overflow controls). Corrected focused run:4 pass,0 fail; touched-crate all-target clippy and fmt pass. The socket controls confirm that unrelated Credit/Close end the socket, and the33rd unacknowledged ended ID refuses immediately without eviction. Both use logical Close1011 with the protocol-error reason; transport receive failures use1002.

Initial iterate passed every other Rust gate row and every other native test, but failed those two new socket controls because I had asserted1002. Their expectations were corrected, then all4 focused controls passed; that first iterate is not a green gate. The first native commit body’s broad wording about workspace tests refers to those other passing native controls, not an overall green iterate. Final full fast on the new branch head is still pending. No product edits. Same-recipe production static build is active, followed by full head fast.

corrected-native-controls.log
corrected-clippy.log

Native review controls committed/pushed separately: `ea6f370129f9151f93b932299a226f388af27e05` (retirement scope/reuse/overflow unit controls), `6c8af9e9c1b7ce83eee0eb9b3a48abbfa6c624b1` (authenticated socket unknown-stream/overflow controls). Corrected focused run:4 pass,0 fail; touched-crate all-target clippy and fmt pass. The socket controls confirm that unrelated Credit/Close end the socket, and the33rd unacknowledged ended ID refuses immediately without eviction. Both use logical Close1011 with the protocol-error reason; transport receive failures use1002. Initial iterate passed every other Rust gate row and every other native test, but failed those two new socket controls because I had asserted1002. Their expectations were corrected, then all4 focused controls passed; that first iterate is not a green gate. The first native commit body’s broad wording about workspace tests refers to those other passing native controls, not an overall green iterate. Final full fast on the new branch head is still pending. No product edits. Same-recipe production static build is active, followed by full head fast. [corrected-native-controls.log](https://git.kayg.org/attachments/885c452d-298e-47f7-a56b-59518a8b880b) [corrected-clippy.log](https://git.kayg.org/attachments/dd99b287-871e-40cd-962a-9e7ba5097396)
Author
Owner

Fresh production build completed with the same scripts/static-cargo --locked --release x86_64-musl recipe:21,387,184 B, SHA256bc3e7b2fa2bde97d06b548981954a96d68f4a8524fed2b41a7c80d99348de58b. Byte-identical to the saved production artifact used by the independent0/10 strict baseline run. Production bundle rebuilt separately as well.

Final scripts/verify fast is active on clean/pushed review head6c8af9e9c. Every native test passed, including all4 added controls; fmt, compile-out, clippy, runtime helper, inode fixture and cargo-deny passed. Static builds are still running. The reconnect regression remains committed/red; final gate output, head scale reruns and six interleaved throughput pairs remain pending. No product edits or deploy.

build-baseline.log

Fresh production build completed with the same scripts/static-cargo --locked --release x86_64-musl recipe:21,387,184 B, SHA256bc3e7b2fa2bde97d06b548981954a96d68f4a8524fed2b41a7c80d99348de58b. Byte-identical to the saved production artifact used by the independent0/10 strict baseline run. Production bundle rebuilt separately as well. Final scripts/verify fast is active on clean/pushed review head6c8af9e9c. Every native test passed, including all4 added controls; fmt, compile-out, clippy, runtime helper, inode fixture and cargo-deny passed. Static builds are still running. The reconnect regression remains committed/red; final gate output, head scale reruns and six interleaved throughput pairs remain pending. No product edits or deploy. [build-baseline.log](https://git.kayg.org/attachments/d41a74f7-90d8-4408-b858-1ac36bb746f0)
Author
Owner

Independent strict head scale qualification:10/10 passes, retries0, on the locked4-core perf VM. Every receipt has desktop/phone revision196/196,0 protocol closes and0 page errors. Independent production baseline was0/10 with145 protocol closes. Screenshots are attached for owner review; no visual-quality judgment.

Fresh same-recipe x86_64 binaries are exactly21,387,184 B each, delta0 B. Baseline SHA256bc3e7b2f… and headed756796… match the author’s recorded images exactly. Tests run on review head6c8af9e9c (product tree unchanged from8f2930350). The inherited reconnect-disposal P1 remains separately reproduced by776d4996a; normal scale success does not cover that lifecycle path.

Six interleaved credited50 MiB LF baseline/head pairs are now running. Final fast’s native rows pass; remaining static/frontend rows are active.

head-counts.json
head-ten.log
head-receipts.tar.gz
review-sixty-desktop.png
review-sixty-phone.png

Independent strict head scale qualification:10/10 passes, retries0, on the locked4-core perf VM. Every receipt has desktop/phone revision196/196,0 protocol closes and0 page errors. Independent production baseline was0/10 with145 protocol closes. Screenshots are attached for owner review; no visual-quality judgment. Fresh same-recipe x86_64 binaries are exactly21,387,184 B each, delta0 B. Baseline SHA256bc3e7b2f… and headed756796… match the author’s recorded images exactly. Tests run on review head6c8af9e9c (product tree unchanged from8f2930350). The inherited reconnect-disposal P1 remains separately reproduced by776d4996a; normal scale success does not cover that lifecycle path. Six interleaved credited50 MiB LF baseline/head pairs are now running. Final fast’s native rows pass; remaining static/frontend rows are active. [head-counts.json](https://git.kayg.org/attachments/76c59a5d-b913-4b2f-a200-15bae032beda) [head-ten.log](https://git.kayg.org/attachments/36def164-e5f7-4e0c-b1af-9ca30c2c7899) [head-receipts.tar.gz](https://git.kayg.org/attachments/accbf56f-5288-4f57-b476-40d039ebfbf6) ![review-sixty-desktop.png](https://git.kayg.org/attachments/4d070ed0-1a2f-4e54-9699-adacacf04d6b) ![review-sixty-phone.png](https://git.kayg.org/attachments/ba1ca404-fcaa-4a03-a931-b3ad862c1e10)
Author
Owner

Perf review complete on locked infraternal-perf-test, x86_64,4 CPUs, no detached measurement processes. Credited50 MiB LF, credit batch65536, RTT0, six fresh-process pairs in exact ABAB order (baseline then head for each pair). MiB/s:

  • Baseline:15.695,8.414,12.050,9.794,10.099,11.321. Median10.710; min/max8.414–15.695.
  • Head:10.109,10.786,12.047,12.501,9.851,11.098. Median10.942; min/max9.851–12.501.

Head median+2.17%; ranges overlap widely, with no throughput regression observed in this window. All6 head samples exceed D41’s10 MB/s (9.537 MiB/s);1/6 baseline samples is below it. Recorded1/5/15-min load ranges:1.81–2.17 /1.32–1.45 /0.79–0.86. Raw run order and every sample/load are attached; no samples discarded.

The real-server withdrawn-subscription recovery control also passes1/1, retaining the healthy socket. Exact x86 baseline/head bytes21,387,184/21,387,184, delta0; hashes match the author’s images. Review head6c8af9e9c is pushed and contains tests only. The inherited reconnect-disposal P1 remains; final scripts/verify fast is still in remaining static checks. VM process check found0 job binary/browser processes after measurements.

summary.json
throughput.log
recovery.log

Perf review complete on locked infraternal-perf-test, x86_64,4 CPUs, no detached measurement processes. Credited50 MiB LF, credit batch65536, RTT0, six fresh-process pairs in exact ABAB order (baseline then head for each pair). MiB/s: - Baseline:15.695,8.414,12.050,9.794,10.099,11.321. Median10.710; min/max8.414–15.695. - Head:10.109,10.786,12.047,12.501,9.851,11.098. Median10.942; min/max9.851–12.501. Head median+2.17%; ranges overlap widely, with no throughput regression observed in this window. All6 head samples exceed D41’s10 MB/s (9.537 MiB/s);1/6 baseline samples is below it. Recorded1/5/15-min load ranges:1.81–2.17 /1.32–1.45 /0.79–0.86. Raw run order and every sample/load are attached; no samples discarded. The real-server withdrawn-subscription recovery control also passes1/1, retaining the healthy socket. Exact x86 baseline/head bytes21,387,184/21,387,184, delta0; hashes match the author’s images. Review head6c8af9e9c is pushed and contains tests only. The inherited reconnect-disposal P1 remains; final scripts/verify fast is still in remaining static checks. VM process check found0 job binary/browser processes after measurements. [summary.json](https://git.kayg.org/attachments/82be8bb3-f909-414f-a357-938df8d8bbad) [throughput.log](https://git.kayg.org/attachments/f7a447f7-7e3f-4c93-afd3-06f53776dc02) [recovery.log](https://git.kayg.org/attachments/d9303935-5046-4c88-bb82-cc33cd6e0ae9)
Author
Owner

Verification complete. Verdict:P1 ×1 on requested delta85b0285b7..8f2930350. Test-only review head6c8af9e9c1b7ce83eee0eb9b3a48abbfa6c624b1 is pushed toreview-sixty-window-stall; worktree clean. No product edits or deployment. Issue remains open.

P1 — unbound Close during reconnect (connection.ts:245, failing test776d4996a). A window attached on socketA remains in writersUsed. After replacement socketB opens/sends Hello, closing that window before its replacement AttachTerm emits1 unbound Close. Strict server handling ends B and its sibling streams with logical Close1011/protocol-error reason. Original never-attached disposal control passes; reconnect control fails. Production control confirms this case is inherited. Distinguish current-socket introduction from retained writer identity while preserving strict unknown-stream handling.

Other claims verified:

  • Four added native retirement/admission/reuse/overflow controls pass. No cross-ID admission bypass found. The33rd unacknowledged ended ID causes immediate socket refusal, not eviction. Normal pool allocation is28 windows/socket, so60 memberships span3 sockets.
  • Pending IDs,inputs and order survive3 replacements with4 in flight and2 queued. Virtual-clock60-subscriber errors produce900 refreshes in the first minute, then60 every5s (12/s average); snapshots stop all retry timers. These are request counts, not CPU measurements. Same-ID refresh retains one bounded slot; real-server healthy-socket withdrawal recovery passes1/1.
  • Independent strict scale:production0/10,145 protocol closes;head10/10,0 protocol closes. Every head desktop/phone ends196/196 with0 page errors. Saved author receipts also audit correctly (155/0 closes).
  • Fresh x86 baseline/head21,387,184/21,387,184 B,delta0 B; hashes match author. Head aarch6419,559,112 B matches author hash and exact production cap. Required fresh baseline comparison is x86.
  • Six interleaved50 MiB LF pairs on the locked4-core perf VM:baseline median10.710 MiB/s (8.414–15.695),head10.942 (9.851–12.501). Headmedian+2.17%; no regression observed in this window. Head6/6 exceed10 MB/s;baseline1/6 below. Earlier performance comment has all samples,load averages and recipe.

Final scripts/verify fast exit1 solely for the committed reconnect regression. All9 Rust rows pass. The deliberate failure stops frontend dispatch; remaining terminal17/0,protocol39/0 and production bundle/transfer checks were run separately and pass. Initial iterate’s two incorrect1002 expectations were corrected to logical1011 before native commits; that initial run is not green.

Verbatim final gate summary; full transcript attached:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 102 pass
 1 fail
 397 expect() calls
Ran 103 tests across 12 files. [225.00ms]

scripts/verify fast exit=1

Self-review complete. Private compiler cache stopped; temporary checkout,build targets,shipping copies,bundles and socket root removed. VM artifacts removed;owned binary/browser process checks empty. Evidence remains outside the checkout and on this issue. Recipes are attached as text because the helper refused shell-script files with422.

fast.log
final-gate-summary.txt
final-state.json
self-review.md
review-findings.md
protocol-units.log
terminal-units.log
transfer-budget.log
vm-cleanup-check.json
vm-cleanup.log
local-cleanup.json
run-vm.txt
run-env.txt
reconnect-baseline.log
iterate.log

Verification complete. **Verdict:P1 ×1** on requested delta85b0285b7..8f2930350. Test-only review head`6c8af9e9c1b7ce83eee0eb9b3a48abbfa6c624b1` is pushed to`review-sixty-window-stall`; worktree clean. No product edits or deployment. Issue remains open. **P1 — unbound Close during reconnect** (`connection.ts:245`, failing test776d4996a). A window attached on socketA remains in writersUsed. After replacement socketB opens/sends Hello, closing that window before its replacement AttachTerm emits1 unbound Close. Strict server handling ends B and its sibling streams with logical Close1011/protocol-error reason. Original never-attached disposal control passes; reconnect control fails. Production control confirms this case is inherited. Distinguish current-socket introduction from retained writer identity while preserving strict unknown-stream handling. Other claims verified: - Four added native retirement/admission/reuse/overflow controls pass. No cross-ID admission bypass found. The33rd unacknowledged ended ID causes immediate socket refusal, not eviction. Normal pool allocation is28 windows/socket, so60 memberships span3 sockets. - Pending IDs,inputs and order survive3 replacements with4 in flight and2 queued. Virtual-clock60-subscriber errors produce900 refreshes in the first minute, then60 every5s (12/s average); snapshots stop all retry timers. These are request counts, not CPU measurements. Same-ID refresh retains one bounded slot; real-server healthy-socket withdrawal recovery passes1/1. - Independent strict scale:production0/10,145 protocol closes;head10/10,0 protocol closes. Every head desktop/phone ends196/196 with0 page errors. Saved author receipts also audit correctly (155/0 closes). - Fresh x86 baseline/head21,387,184/21,387,184 B,delta0 B; hashes match author. Head aarch6419,559,112 B matches author hash and exact production cap. Required fresh baseline comparison is x86. - Six interleaved50 MiB LF pairs on the locked4-core perf VM:baseline median10.710 MiB/s (8.414–15.695),head10.942 (9.851–12.501). Headmedian+2.17%; no regression observed in this window. Head6/6 exceed10 MB/s;baseline1/6 below. Earlier performance comment has all samples,load averages and recipe. Final `scripts/verify fast` **exit1 solely for the committed reconnect regression**. All9 Rust rows pass. The deliberate failure stops frontend dispatch; remaining terminal17/0,protocol39/0 and production bundle/transfer checks were run separately and pass. Initial iterate’s two incorrect1002 expectations were corrected to logical1011 before native commits; that initial run is not green. Verbatim final gate summary; full transcript attached: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 102 pass 1 fail 397 expect() calls Ran 103 tests across 12 files. [225.00ms] scripts/verify fast exit=1 ``` Self-review complete. Private compiler cache stopped; temporary checkout,build targets,shipping copies,bundles and socket root removed. VM artifacts removed;owned binary/browser process checks empty. Evidence remains outside the checkout and on this issue. Recipes are attached as text because the helper refused shell-script files with422. [fast.log](https://git.kayg.org/attachments/fd923f8a-b44f-4bdc-b4af-b1dd01df68c0) [final-gate-summary.txt](https://git.kayg.org/attachments/b9dc07e7-04c3-40d7-bd22-d5e7bb6da459) [final-state.json](https://git.kayg.org/attachments/30c4adf7-2710-4344-8c00-791d5a1c0c40) [self-review.md](https://git.kayg.org/attachments/57e9dba2-07d1-4483-a92d-055e8f0f61ea) [review-findings.md](https://git.kayg.org/attachments/cc9b68b9-7246-43d5-9f91-f5e9a7db9112) [protocol-units.log](https://git.kayg.org/attachments/008f8841-05ad-49e8-bd3a-57118e997542) [terminal-units.log](https://git.kayg.org/attachments/1a3a7f74-d52d-4c5a-9a57-8994ccca86f8) [transfer-budget.log](https://git.kayg.org/attachments/482fbe7c-1808-4bda-a380-61440bc6644f) [vm-cleanup-check.json](https://git.kayg.org/attachments/d320ab39-c532-4f2e-b344-bec693d2e870) [vm-cleanup.log](https://git.kayg.org/attachments/0ae27753-aacf-4e8d-b80b-15098c30f19d) [local-cleanup.json](https://git.kayg.org/attachments/5e47f4ad-81aa-4928-81c5-c1ba1a99caa4) [run-vm.txt](https://git.kayg.org/attachments/0223c0d6-0a1d-4ddf-9b9d-10a485c2e01e) [run-env.txt](https://git.kayg.org/attachments/1ea2a99a-03bc-44ea-9784-c5d18df6acdb) [reconnect-baseline.log](https://git.kayg.org/attachments/479b4499-7a81-404d-a6f7-2481c021caa4) [iterate.log](https://git.kayg.org/attachments/9b75f7c8-2368-47ae-8199-fdaa4093d1ec)
Author
Owner

Starting #250 on branch sixty-window-reconnect-close, requested base 8f29303503fbf2fb67e6ec4454aefb8397d61caf (sixty-window-stall). The worktree was at stale WIP 32a98b1; its three-file difference from the requested head is limited to the WIP layout gate, removal of the test-server close capture, and removal of the plugin subscription clarification. I reviewed all 28 #250 comments and the linked #243 history. The open review finding is 776d4996a: a prior-socket writer record can cause an unbound Close after reconnect. The review also measured 900 layout refreshes in the first minute across 60 withdrawn subscribers, then 60 every five seconds. I will align this branch to the requested head, reproduce the failing regression, fix the socket-local attachment check while retaining strict server admission, then add jitter if it is size-neutral. No push or deployment.

Starting #250 on branch `sixty-window-reconnect-close`, requested base `8f29303503fbf2fb67e6ec4454aefb8397d61caf` (`sixty-window-stall`). The worktree was at stale WIP `32a98b1`; its three-file difference from the requested head is limited to the WIP layout gate, removal of the test-server close capture, and removal of the plugin subscription clarification. I reviewed all 28 #250 comments and the linked #243 history. The open review finding is `776d4996a`: a prior-socket writer record can cause an unbound Close after reconnect. The review also measured 900 layout refreshes in the first minute across 60 withdrawn subscribers, then 60 every five seconds. I will align this branch to the requested head, reproduce the failing regression, fix the socket-local attachment check while retaining strict server admission, then add jitter if it is size-neutral. No push or deployment.
Author
Owner

Finding reproduced on the requested 8f2930350 base after cherry-picking 776d4996a as 3a4878f88: bun test src/connection-unattached-close.test.ts reports 1 pass / 1 fail (6 assertions). The reconnect regression fails because the replacement socket records Close for the retired window before any AttachTerm on that socket; the never-attached control passes. Full test output is outside the checkout at $HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/failing-close-test.log. Server admission remains unchanged and strict.

Finding reproduced on the requested `8f2930350` base after cherry-picking `776d4996a` as `3a4878f88`: `bun test src/connection-unattached-close.test.ts` reports 1 pass / 1 fail (6 assertions). The reconnect regression fails because the replacement socket records Close for the retired window before any AttachTerm on that socket; the never-attached control passes. Full test output is outside the checkout at `$HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/failing-close-test.log`. Server admission remains unchanged and strict.
Author
Owner

Completed reconnect fix 0fe236563: Close is sent only after this WebSocket successfully sent AttachTerm for the stream; reconnect clears the socket-local set while retaining the writer set used for rotation. Strict server unknown-stream handling is unchanged. The cherry-picked regression failed before the fix (1 pass / 1 fail); afterward the connection/layout suite passed 195/195 tests across 28 files, and bun run check exited 0. Tracer dependencies were installed from the frozen lockfile with --no-save; no lockfile change. The exact logs are outside the checkout under $HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/. Layout retry jitter remains.

Completed reconnect fix `0fe236563`: Close is sent only after this WebSocket successfully sent AttachTerm for the stream; reconnect clears the socket-local set while retaining the writer set used for rotation. Strict server unknown-stream handling is unchanged. The cherry-picked regression failed before the fix (1 pass / 1 fail); afterward the connection/layout suite passed 195/195 tests across 28 files, and `bun run check` exited 0. Tracer dependencies were installed from the frozen lockfile with `--no-save`; no lockfile change. The exact logs are outside the checkout under `$HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/`. Layout retry jitter remains.
Author
Owner

Finding reproduced with a virtual clock across 60 independent layout stores: 100 withdrawal events coalesce to one timer per store, but all first delays land in one 250 ms slot. The unchanged schedule produces 900 refreshes in the first 60 seconds and 60 more in the following five seconds. The new distribution regression currently reports 17 pass / 1 fail; tracer type checking passes. This is request scheduling, not a host timing measurement. Raw test output: $HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/failing-layout-jitter-test.log.

Finding reproduced with a virtual clock across 60 independent layout stores: 100 withdrawal events coalesce to one timer per store, but all first delays land in one 250 ms slot. The unchanged schedule produces 900 refreshes in the first 60 seconds and 60 more in the following five seconds. The new distribution regression currently reports 17 pass / 1 fail; tracer type checking passes. This is request scheduling, not a host timing measurement. Raw test output: `$HOME/.cache/codex-scratch/sixty-window-reconnect-close/evidence/failing-layout-jitter-test.log`.
Author
Owner

Completed retry jitter in 4c8cd1bb3. For 60 virtual-clock subscribers, the first-minute retry count fell from 900 to 753, and the following five-second window fell from 60 to 48; first-delay slots are 60 instead of 1. The focused layout test passes 18/18 and bun run check passes. Baseline and after logs: baseline, after.

Completed retry jitter in `4c8cd1bb3`. For 60 virtual-clock subscribers, the first-minute retry count fell from 900 to 753, and the following five-second window fell from 60 to 48; first-delay slots are 60 instead of 1. The focused layout test passes 18/18 and `bun run check` passes. Baseline and after logs: [baseline](https://git.kayg.org/attachments/68e32c7f-037c-437f-a712-8a265137c91e), [after](https://git.kayg.org/attachments/8ab881a6-b172-4db6-8e83-5a3fb6f96f4f).
Author
Owner

Static size step complete on 4c8cd1bb3. The shipping stripped binaries match the 8f2930350 baseline caps: x86_64 21,387,184 bytes (delta 0); aarch64 19,559,112 bytes (delta 0). Both are statically linked. Build receipts: x86_64, aarch64.

Static size step complete on `4c8cd1bb3`. The shipping stripped binaries match the `8f2930350` baseline caps: x86_64 21,387,184 bytes (delta 0); aarch64 19,559,112 bytes (delta 0). Both are statically linked. Build receipts: [x86_64](https://git.kayg.org/attachments/b540460a-ffea-4cea-ba03-d779cfa0b7e0), [aarch64](https://git.kayg.org/attachments/002dfd29-26cf-4c5b-98d9-5ddc60ee83fd).
Author
Owner

Focused tracer checks completed on 4c8cd1bb3: bun run check passed; connection/layout tests passed with 196 pass, 0 fail across 28 files. Log: focused-connection-layout-final.log.

Focused tracer checks completed on `4c8cd1bb3`: `bun run check` passed; connection/layout tests passed with 196 pass, 0 fail across 28 files. Log: [focused-connection-layout-final.log](https://git.kayg.org/attachments/3a4364e0-bcd0-4f85-807f-0f4074eb8508).
Author
Owner

Strict sixty-membership real-server gate passed on 4c8cd1bb3 with the production tracer bundle and shipping static x86_64 binary: 10/10 repeats; all 10 per-run receipts report 0 invalid-protocol closes. Evidence: gate log, close summary, desktop screenshot, phone screenshot.

Strict sixty-membership real-server gate passed on `4c8cd1bb3` with the production tracer bundle and shipping static x86_64 binary: 10/10 repeats; all 10 per-run receipts report 0 invalid-protocol closes. Evidence: [gate log](https://git.kayg.org/attachments/3d5a6240-180d-4dbb-b077-6ee3d94f0d80), [close summary](https://git.kayg.org/attachments/8f5858c2-ec42-4055-bdf3-8146ea37ffc9), [desktop screenshot](https://git.kayg.org/attachments/ef6fd963-50c5-4dd8-b2e0-76d7c1fea841), [phone screenshot](https://git.kayg.org/attachments/bfa4a023-d933-4ca7-94a8-6e58bb81e05e).
Author
Owner

verify iterate reached Rust tests; 98 passed and one failed: restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced returned EXDEV while hard-linking the Cargo test executable. The state root was /run/user/1001/swc (tmpfs), while the test executable is on /home; this is a test setup cross-device link, not a host-load timeout. I will rerun with a short state-root alias backed by this job’s same-filesystem scratch. Receipt: verify-iterate.log.

`verify iterate` reached Rust tests; 98 passed and one failed: `restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced` returned `EXDEV` while hard-linking the Cargo test executable. The state root was `/run/user/1001/swc` (tmpfs), while the test executable is on `/home`; this is a test setup cross-device link, not a host-load timeout. I will rerun with a short state-root alias backed by this job’s same-filesystem scratch. Receipt: [verify-iterate.log](https://git.kayg.org/attachments/71cb2bc0-7efb-4a62-bada-fade115dbd64).
Author
Owner

The first 10× harness invocation did not reach the server: all 10 repeats reported ENOENT because the environment override was misspelled, so Playwright fell back to the absent worktree target binary. I corrected the variable names to the source-defined INFRATERNAL_* names; the subsequent 10/10 run against the static binary passed with 0 invalid-protocol closes. Failed invocation receipt: real-sixty-10x.log.

The first 10× harness invocation did not reach the server: all 10 repeats reported `ENOENT` because the environment override was misspelled, so Playwright fell back to the absent worktree `target` binary. I corrected the variable names to the source-defined `INFRATERNAL_*` names; the subsequent 10/10 run against the static binary passed with 0 invalid-protocol closes. Failed invocation receipt: [real-sixty-10x.log](https://git.kayg.org/attachments/9d99bc82-7af3-4b85-9897-28764e7696a9).
Author
Owner

The same-filesystem rerun exposed a second setup issue: the short sw250 alias was a symlink, and restart-path tests intentionally reject symlinked ancestors or compare the literal install path. Eight restart tests failed; this is not a product regression. I will rerun with the physical job scratch root, which is 60 bytes and keeps the longest restart socket path at 105 bytes. Separately, cargo-deny found RUSTSEC-2026-0382 in the unchanged lockfile: rustls-webpki 0.103.15; RustSec says 0.103.16 is patched (issued 2026-10-20). I’ll update only that existing package’s lock entry in its own commit. Evidence: iterate log, RustSec advisory, upstream advisory.

The same-filesystem rerun exposed a second setup issue: the short `sw250` alias was a symlink, and restart-path tests intentionally reject symlinked ancestors or compare the literal install path. Eight restart tests failed; this is not a product regression. I will rerun with the physical job scratch root, which is 60 bytes and keeps the longest restart socket path at 105 bytes. Separately, `cargo-deny` found RUSTSEC-2026-0382 in the unchanged lockfile: `rustls-webpki 0.103.15`; RustSec says `0.103.16` is patched (issued 2026-10-20). I’ll update only that existing package’s lock entry in its own commit. Evidence: [iterate log](https://git.kayg.org/attachments/45e4eb4a-2e24-499d-9ae4-ad8ca0beb20b), [RustSec advisory](https://git.kayg.org/attachments/634848b6-12cf-4d48-851f-57bab5320d66), [upstream advisory](https://rustsec.org/advisories/RUSTSEC-2026-0382).
Author
Owner

The physical job root removed symlink/cross-device effects, but two tests still failed because the root’s 60-byte path made setup-token and remote_server socket names exceed Linux sun_path; the Rust suite reported 97 pass, 2 fail. I’ll rerun with a mode-700 physical runtime directory at /home/kayg/.cache/codex-scratch/sw250 (same filesystem as the target, 37-byte path), and remove it after verification. Receipt: verify-iterate-physical.log.

The physical job root removed symlink/cross-device effects, but two tests still failed because the root’s 60-byte path made `setup-token` and `remote_server` socket names exceed Linux `sun_path`; the Rust suite reported 97 pass, 2 fail. I’ll rerun with a mode-700 physical runtime directory at `/home/kayg/.cache/codex-scratch/sw250` (same filesystem as the target, 37-byte path), and remove it after verification. Receipt: [verify-iterate-physical.log](https://git.kayg.org/attachments/09e8a7af-0f46-4845-8813-9a8a7be8faa3).
Author
Owner

The 37-byte state root fixed the restart and token sockets; the remaining failing test was infraternal-agent::daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up. It builds its socket under TMPDIR; my previous TMPDIR was the 64-byte job-local tmp path, exceeding sun_path. I’ll rerun with both TMPDIR and INFRATERNAL_TEST_STATE_ROOT set to the 37-byte private physical path. Rust tests were 147 pass, 1 fail, 20 ignored before this correction; cargo-deny passed. Receipt: verify-iterate-short-root.log.

The 37-byte state root fixed the restart and token sockets; the remaining failing test was `infraternal-agent::daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up`. It builds its socket under `TMPDIR`; my previous `TMPDIR` was the 64-byte job-local `tmp` path, exceeding `sun_path`. I’ll rerun with both `TMPDIR` and `INFRATERNAL_TEST_STATE_ROOT` set to the 37-byte private physical path. Rust tests were 147 pass, 1 fail, 20 ignored before this correction; cargo-deny passed. Receipt: [verify-iterate-short-root.log](https://git.kayg.org/attachments/5d9581fc-b150-48dc-8741-39ee096807e1).
Author
Owner

Committed the RUSTSEC fix as 9cdc12901, changing only Cargo.lock to rustls-webpki 0.103.16. cargo check --locked -p infraternal and cargo deny check advisories pass; the feature tree confirms the existing rustls dependency, with no added crate or feature. Receipts: check, advisory gate, dependency tree.

Committed the RUSTSEC fix as `9cdc12901`, changing only `Cargo.lock` to `rustls-webpki 0.103.16`. `cargo check --locked -p infraternal` and `cargo deny check advisories` pass; the feature tree confirms the existing `rustls` dependency, with no added crate or feature. Receipts: [check](https://git.kayg.org/attachments/9d4a6772-9e5a-40d8-b515-8eef02e3e8e5), [advisory gate](https://git.kayg.org/attachments/8457b869-cedd-4e4f-8af9-ae3d72744c8f), [dependency tree](https://git.kayg.org/attachments/24520b9d-9901-4449-ae9e-77d15c6fa61e).
Author
Owner

The short physical root passed the restart and token socket tests. One agent session fixture still failed because its path is TMPDIR/g<24 hex>/sessions/<32 hex>.sock: with the 37-byte root that totals exactly 108 bytes, while Linux requires less than 108. RustSec and other gate rows passed; Rust test result was 147 passed, 1 failed, 20 ignored. I’ll shorten the private physical root to 36 bytes and rerun. Receipt: verify-iterate-final.log.

The short physical root passed the restart and token socket tests. One agent session fixture still failed because its path is `TMPDIR/g<24 hex>/sessions/<32 hex>.sock`: with the 37-byte root that totals exactly 108 bytes, while Linux requires less than 108. RustSec and other gate rows passed; Rust test result was 147 passed, 1 failed, 20 ignored. I’ll shorten the private physical root to 36 bytes and rerun. Receipt: [verify-iterate-final.log](https://git.kayg.org/attachments/bab52f60-958f-4f47-928d-636bfb0fe7c3).
Author
Owner

Correction to the previous path count: daemon_gone_tests appends /g<24 hex>/sessions/<32 hex>.sock; the 37-byte root made a 110-byte path (not 108). The new physical root /home/kayg/.cache/codex-scratch/a is 33 bytes, yielding 106 bytes, mode 700, on the same filesystem as the worktree and Cargo target. The prior gate receipt remains here.

Correction to the previous path count: `daemon_gone_tests` appends `/g<24 hex>/sessions/<32 hex>.sock`; the 37-byte root made a 110-byte path (not 108). The new physical root `/home/kayg/.cache/codex-scratch/a` is 33 bytes, yielding 106 bytes, mode 700, on the same filesystem as the worktree and Cargo target. The prior gate receipt remains [here](https://git.kayg.org/attachments/bab52f60-958f-4f47-928d-636bfb0fe7c3).
Author
Owner

verify iterate passed at 9cdc12901. Rust tests passed with the 33-byte physical state root, cargo-deny passed for rustls-webpki 0.103.16, and the tracer compiler/precompression/bundle transfer checks passed. Gate output:

ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done.

Receipt: verify-iterate-pass.log.

`verify iterate` passed at `9cdc12901`. Rust tests passed with the 33-byte physical state root, cargo-deny passed for `rustls-webpki 0.103.16`, and the tracer compiler/precompression/bundle transfer checks passed. Gate output: > ITERATE gate passed. This is not the final gate: run scripts/verify fast before reporting done. Receipt: [verify-iterate-pass.log](https://git.kayg.org/attachments/9f29d313-749f-42bd-82cb-76eb47e07a4d).
Author
Owner

The first final fast attempt passed Rust tests, cargo-deny, SSH inode reuse and the non-static rows, then failed x86_64 static compilation because the shared sccache server tried to create /home/kayg/.cache/mr9/sccache…, a temp root from another job that no longer exists. This is build-environment state; no source or size result was produced. I’ll measure both static architectures with the same scripts/static-cargo recipe and the wrapper unset using this job’s TMPDIR, then rerun the final fast gate. Receipt: verify-fast.log.

The first final fast attempt passed Rust tests, cargo-deny, SSH inode reuse and the non-static rows, then failed x86_64 static compilation because the shared `sccache` server tried to create `/home/kayg/.cache/mr9/sccache…`, a temp root from another job that no longer exists. This is build-environment state; no source or size result was produced. I’ll measure both static architectures with the same `scripts/static-cargo` recipe and the wrapper unset using this job’s TMPDIR, then rerun the final fast gate. Receipt: [verify-fast.log](https://git.kayg.org/attachments/894c129f-cb88-4e60-a3b5-436682225a22).
Author
Owner

Static size after the rustls-webpki advisory patch: x86_64 21,388,208 bytes (+1,024 vs 8f2930350); aarch64 19,560,520 bytes (+1,408). Both deltas are under the 16 KiB review threshold. The exact D243 caps must be ratcheted to these measured sizes for the final gate. Build log: static-post-patch-no-sccache.log. I’ll update the caps and size history, then run the final fast gate.

Static size after the rustls-webpki advisory patch: x86_64 21,388,208 bytes (+1,024 vs 8f2930350); aarch64 19,560,520 bytes (+1,408). Both deltas are under the 16 KiB review threshold. The exact D243 caps must be ratcheted to these measured sizes for the final gate. Build log: [static-post-patch-no-sccache.log](https://git.kayg.org/attachments/3e558501-41ce-46bd-a9bd-01794647d567). I’ll update the caps and size history, then run the final fast gate.
Author
Owner

Committed f1738e40f: updated D243 ceilings and PROCESS.md history to the measured static outputs. The focused static binary checks passed:

PT_INTERP: absent; size: 21388208 bytes; cap: 21388208 bytes; delta: +0 bytes
PT_INTERP: absent; size: 19560520 bytes; cap: 19560520 bytes; delta: +0 bytes

git diff --check and bash -n scripts/verify.d/rust.sh passed. Static build receipt: static-post-patch-no-sccache.log. The final scripts/verify fast remains to run.

Committed f1738e40f: updated D243 ceilings and PROCESS.md history to the measured static outputs. The focused static binary checks passed: PT_INTERP: absent; size: 21388208 bytes; cap: 21388208 bytes; delta: +0 bytes PT_INTERP: absent; size: 19560520 bytes; cap: 19560520 bytes; delta: +0 bytes `git diff --check` and `bash -n scripts/verify.d/rust.sh` passed. Static build receipt: [static-post-patch-no-sccache.log](https://git.kayg.org/attachments/3e558501-41ce-46bd-a9bd-01794647d567). The final `scripts/verify fast` remains to run.
Author
Owner

Self-review found the layout timer tests restore globalThis.random instead of Math.random: server-store.test.ts captures random: Math.random, replaces Math.random, then calls Object.assign(globalThis, original) in both retry tests. This leaks a deterministic RNG into later tests. I’m adding a regression assertion and will restore the original function directly.

Self-review found the layout timer tests restore `globalThis.random` instead of `Math.random`: `server-store.test.ts` captures `random: Math.random`, replaces `Math.random`, then calls `Object.assign(globalThis, original)` in both retry tests. This leaks a deterministic RNG into later tests. I’m adding a regression assertion and will restore the original function directly.
Author
Owner

The new regression assertions fail before the fix: server-store.test.ts reports 18 pass, 2 fail; both failures show Math.random differs from the module's original function after the virtual retry tests. Receipt: random-cleanup-repro.log.

The new regression assertions fail before the fix: `server-store.test.ts` reports 18 pass, 2 fail; both failures show `Math.random` differs from the module's original function after the virtual retry tests. Receipt: [random-cleanup-repro.log](https://git.kayg.org/attachments/ec5eca24-cc2d-4851-87a3-7a41dc2c1f09).
Author
Owner

Committed 4724c8baa: both virtual timer tests now restore Math.random directly and assert cleanup. The focused server-store suite passes: 20 pass, 0 fail, 138 expect() calls. bun run check completed without diagnostics. Receipts: random-cleanup-fixed.log, bun-check-after-cleanup.log. I’ll rerun scripts/verify fast on this head.

Committed 4724c8baa: both virtual timer tests now restore `Math.random` directly and assert cleanup. The focused server-store suite passes: 20 pass, 0 fail, 138 expect() calls. `bun run check` completed without diagnostics. Receipts: [random-cleanup-fixed.log](https://git.kayg.org/attachments/d17f8ae4-0f06-43e6-8338-90e15e7663c8), [bun-check-after-cleanup.log](https://git.kayg.org/attachments/52d4081f-ec29-4a65-9671-72ec0cc0951d). I’ll rerun `scripts/verify fast` on this head.
Author
Owner

The final fast run at 4724c8baa failed the Rust test row: 609 passed, 1 failed, 52 ignored. bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement panicked at crates/infraternal-server/src/bootstrap_breakit2_tests.rs:29 with Storage(PoolTimedOut) while opening its private SQLite fixture. This is outside the documented #118 timeout exceptions; all other Rust rows, static size checks, and the tracer checks completed. Full receipt: verify-fast-final-4724c8baa.log. I’m checking the fixture pool setup and will rerun verification after resolving the timeout.

The final fast run at 4724c8baa failed the Rust `test` row: 609 passed, 1 failed, 52 ignored. `bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement` panicked at `crates/infraternal-server/src/bootstrap_breakit2_tests.rs:29` with `Storage(PoolTimedOut)` while opening its private SQLite fixture. This is outside the documented #118 timeout exceptions; all other Rust rows, static size checks, and the tracer checks completed. Full receipt: [verify-fast-final-4724c8baa.log](https://git.kayg.org/attachments/ecd38342-0bd1-4bee-85f1-b404f6e40c96). I’m checking the fixture pool setup and will rerun verification after resolving the timeout.
Author
Owner

The failing workspace test passes when rerun alone with the same workspace feature context: live_fixture_keeps_authority_after_connection_retirement 1 passed, 0 failed. The earlier PoolTimedOut was transient under concurrent host load; this is outside the documented #118 exception list, so I will rerun the full fast gate rather than waive the row. Receipt: breakit2-timeout-isolated.log.

The failing workspace test passes when rerun alone with the same workspace feature context: `live_fixture_keeps_authority_after_connection_retirement` 1 passed, 0 failed. The earlier PoolTimedOut was transient under concurrent host load; this is outside the documented #118 exception list, so I will rerun the full fast gate rather than waive the row. Receipt: [breakit2-timeout-isolated.log](https://git.kayg.org/attachments/a85bfd2a-0b8e-4be3-a9de-d8f3f05343b8).
Author
Owner

Finished at head 4724c8baa (no push or deploy).

The reconnect fix sends Close only when that stream sent AttachTerm on the current WebSocket; the server remains strict. The real-server 60-membership gate passed 10/10 with 0 protocol closes; screenshots and per-run receipts are attached in earlier comments. Layout retry schedule changed from 900 to 753 requests in the first virtual minute and from 60 to 48 in the following virtual five seconds; all 60 subscribers received distinct initial delay slots. This is virtual scheduling evidence, not a host timing measurement.

Stripped static sizes versus 8f2930350: x86_64 21,388,208 bytes (+1,024), aarch64 19,560,520 bytes (+1,408). The exact D243 caps match. Self-review also caught and fixed RNG cleanup in the timer tests; the new assertions reproduced the leak before the fix and now pass.

One full run had a single PoolTimedOut in live_fixture_keeps_authority_after_connection_retirement; the exact workspace test passed alone, and the subsequent full run passed without waiving the row.

Final scripts/verify fast output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.90s]

Exit status: 0. Full receipt: verify-fast-final-4724c8baa-retry.log.

Finished at head `4724c8baa` (no push or deploy). The reconnect fix sends Close only when that stream sent AttachTerm on the current WebSocket; the server remains strict. The real-server 60-membership gate passed 10/10 with 0 protocol closes; screenshots and per-run receipts are attached in earlier comments. Layout retry schedule changed from 900 to 753 requests in the first virtual minute and from 60 to 48 in the following virtual five seconds; all 60 subscribers received distinct initial delay slots. This is virtual scheduling evidence, not a host timing measurement. Stripped static sizes versus `8f2930350`: x86_64 21,388,208 bytes (+1,024), aarch64 19,560,520 bytes (+1,408). The exact D243 caps match. Self-review also caught and fixed RNG cleanup in the timer tests; the new assertions reproduced the leak before the fix and now pass. One full run had a single `PoolTimedOut` in `live_fixture_keeps_authority_after_connection_retirement`; the exact workspace test passed alone, and the subsequent full run passed without waiving the row. Final `scripts/verify fast` output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.90s] ``` Exit status: 0. Full receipt: [verify-fast-final-4724c8baa-retry.log](https://git.kayg.org/attachments/25a27770-7737-4259-af14-c89f37ed45e4).
Author
Owner

Starting independent break-it review on review-sixty-window-reconnect, target head 4724c8baa02e71d5e0b00f96dff83c3421861f2f (review delta from 8f2930350 through 4724c8baa). Worktree is clean. I’m checking reconnect close timing, stream retirement/reattach, strict server admission, layout retry bounds and fairness, the real-server 60-membership gate, and scripts/verify fast. No source changes or deployment.

Starting independent break-it review on `review-sixty-window-reconnect`, target head `4724c8baa02e71d5e0b00f96dff83c3421861f2f` (review delta from `8f2930350` through `4724c8baa`). Worktree is clean. I’m checking reconnect close timing, stream retirement/reattach, strict server admission, layout retry bounds and fairness, the real-server 60-membership gate, and `scripts/verify fast`. No source changes or deployment.
Author
Owner

Focused review step at 4724c8baa: bun test src/connection-unattached-close.test.ts src/canvas/model/server-store.test.ts passed 22 tests / 144 assertions. The virtual 60-store retry schedule reported first-minute=753, following_5s=48, first_delay_slots=60; the implementation bounds each first delay to [250, 375) ms. Server inspection confirms Close still requires an attached odd stream (websocket.rs removes from attachments with ok_or(())?), and the socket-local set is cleared on both replacement and disconnect. Receipt: focused-tracer-tests.log. No finding from this step.

Focused review step at `4724c8baa`: `bun test src/connection-unattached-close.test.ts src/canvas/model/server-store.test.ts` passed 22 tests / 144 assertions. The virtual 60-store retry schedule reported first-minute=753, following_5s=48, first_delay_slots=60; the implementation bounds each first delay to [250, 375) ms. Server inspection confirms Close still requires an attached odd stream (`websocket.rs` removes from `attachments` with `ok_or(())?`), and the socket-local set is cleared on both replacement and disconnect. Receipt: [focused-tracer-tests.log](https://git.kayg.org/attachments/c346cca1-598b-4c78-99fb-f18c22f0bf1f). No finding from this step.
Author
Owner

Full scripts/verify fast completed at 4724c8baa02e71d5e0b00f96dff83c3421861f2f, exit status 0. Verbatim summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [4.37s]

The static-build row took 1474 s. Full transcript: verify-fast.log.

Full `scripts/verify fast` completed at `4724c8baa02e71d5e0b00f96dff83c3421861f2f`, exit status 0. Verbatim summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [4.37s] ``` The static-build row took 1474 s. Full transcript: [verify-fast.log](https://git.kayg.org/attachments/6a7a7baa-06ae-4f34-a8a4-d524f83dd63e).
Author
Owner

Real-server 60-membership gate: 10/10 passed (2.6m). Every run had 0 page errors, 0 invalid-protocol socket closes, and desktop/phone at canonical revision 196 with 2 views. The focused virtual retry schedule measured 60 distinct first-retry slots, 753 refreshes in the first minute, and 48 in the next five seconds; delay range was 250–<375 ms. Post-reconnect Close-to-server probe is queued separately.

Artifacts: 10x run log, desktop screenshot, phone screenshot; per-run receipts: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9.

Real-server 60-membership gate: 10/10 passed (2.6m). Every run had 0 page errors, 0 invalid-protocol socket closes, and desktop/phone at canonical revision 196 with 2 views. The focused virtual retry schedule measured 60 distinct first-retry slots, 753 refreshes in the first minute, and 48 in the next five seconds; delay range was 250–<375 ms. Post-reconnect Close-to-server probe is queued separately. Artifacts: [10x run log](https://git.kayg.org/attachments/735d041f-d8f9-4676-b7de-9bd8f1cd47d2), [desktop screenshot](https://git.kayg.org/attachments/bb2bbb46-7ae0-4e5e-a68e-c94820deb132), [phone screenshot](https://git.kayg.org/attachments/74498492-b203-4e1f-bdeb-a2f6a7572742); per-run receipts: [0](https://git.kayg.org/attachments/4ea717c5-17b8-402d-a839-76f0b9e4d306), [1](https://git.kayg.org/attachments/257c30d3-67b1-45fe-aaf2-d2c6c36efd49), [2](https://git.kayg.org/attachments/28ef60e5-6a60-4c16-92ac-9606ccf79322), [3](https://git.kayg.org/attachments/aae3229e-b042-4d61-b4fd-3d630b64ef3e), [4](https://git.kayg.org/attachments/82b9a510-f1d6-4931-90f8-1f78252cc67e), [5](https://git.kayg.org/attachments/c5fc184e-3c25-4338-8ce3-0b7ac6107f41), [6](https://git.kayg.org/attachments/7eb0b691-0ad9-43bd-8e13-aa4e7129b596), [7](https://git.kayg.org/attachments/f79b8849-a024-4624-ab41-be06fe7e029c), [8](https://git.kayg.org/attachments/a8e69264-b71e-4b01-a2c3-83f17a2f13d2), [9](https://git.kayg.org/attachments/38b94b29-15f1-4c68-83e0-3fad0fdef4b9).
Author
Owner

Reconnect close probes passed. With the production server, both terminal streams reattached after a server restart; closing one delivered its stream ID in the replacement socket's client Close frames, left the socket open, and retained the sibling attachment. A synthetic ordering probe closed a retained stream before replacement Welcome, then delivered Welcome: the retired stream emitted 0 frames and the survivor reattached exactly once. The strict server Close branch remains unchanged (crates/infraternal-server/src/websocket.rs:2126-2127). Production-server probe; pre-Welcome ordering probe. The two-restart variant is still queued.

Reconnect close probes passed. With the production server, both terminal streams reattached after a server restart; closing one delivered its stream ID in the replacement socket's client Close frames, left the socket open, and retained the sibling attachment. A synthetic ordering probe closed a retained stream before replacement Welcome, then delivered Welcome: the retired stream emitted 0 frames and the survivor reattached exactly once. The strict server Close branch remains unchanged (`crates/infraternal-server/src/websocket.rs:2126-2127`). [Production-server probe](https://git.kayg.org/attachments/4c5a4adb-88af-4a44-ae69-e004dba30316); [pre-Welcome ordering probe](https://git.kayg.org/attachments/8bf71e98-63f4-4446-ac23-e7789087d4f0). The two-restart variant is still queued.
Author
Owner

Two-replacement synthetic probe passed: both streams attached on each replacement socket; on the third socket, closing one emitted AttachTerm then Close while its sibling reattached once. Probe receipt. The production-server probe after one restart already passed; the production-server double-restart variant remains queued behind the shared build slots.

Two-replacement synthetic probe passed: both streams attached on each replacement socket; on the third socket, closing one emitted AttachTerm then Close while its sibling reattached once. [Probe receipt](https://git.kayg.org/attachments/f54a37d3-269b-4291-88c2-62b3bb95175d). The production-server probe after one restart already passed; the production-server double-restart variant remains queued behind the shared build slots.
Author
Owner

Finished review at HEAD 4724c8baa02e71d5e0b00f96dff83c3421861f2f. Findings: none (P0–P3). Verdict: MERGE. No code under review was modified; worktree is clean.

Checks: focused tracer tests passed (22 tests, 144 expectations). The 60-membership real-server test passed 10/10; every run had 0 page errors, 0 invalid-protocol closes, and both clients at canonical revision 196. The virtual retry schedule spread all 60 first retries across distinct slots (250–<375 ms), with 753 refreshes in the first minute and 48 in the following five seconds. A production-server reconnect probe received Close for one reattached stream while keeping its sibling and socket alive. A pre-Welcome probe confirmed a retired stream is not reattached; a synthetic two-replacement probe emitted AttachTerm then Close on the latest socket. The server’s strict Close branch remains unchanged (websocket.rs:2126-2127). Evidence is attached in the preceding comments. The extra production-server double-restart run remained queued for 8m39 without acquiring a build slot and was stopped after the two-replacement probe passed.

scripts/verify fast exited 0. Verbatim gate summary:

(static builds: 1474s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [4.37s]
Finished review at HEAD `4724c8baa02e71d5e0b00f96dff83c3421861f2f`. Findings: none (P0–P3). Verdict: MERGE. No code under review was modified; worktree is clean. Checks: focused tracer tests passed (22 tests, 144 expectations). The 60-membership real-server test passed 10/10; every run had 0 page errors, 0 invalid-protocol closes, and both clients at canonical revision 196. The virtual retry schedule spread all 60 first retries across distinct slots (250–<375 ms), with 753 refreshes in the first minute and 48 in the following five seconds. A production-server reconnect probe received Close for one reattached stream while keeping its sibling and socket alive. A pre-Welcome probe confirmed a retired stream is not reattached; a synthetic two-replacement probe emitted AttachTerm then Close on the latest socket. The server’s strict Close branch remains unchanged (`websocket.rs:2126-2127`). Evidence is attached in the preceding comments. The extra production-server double-restart run remained queued for 8m39 without acquiring a build slot and was stopped after the two-replacement probe passed. `scripts/verify fast` exited 0. Verbatim gate summary: ```text (static builds: 1474s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [4.37s] ```
Author
Owner

Release 9.2 integration is running on release-9-2 from 411485164; progress, interplay findings and final artifact/gate receipts are tracked on #24. No deploy. #240 inclusion remains conditional on its completed finish record after #250/#243 are integrated and gated.

Release 9.2 integration is running on release-9-2 from 411485164; progress, interplay findings and final artifact/gate receipts are tracked on #24. No deploy. #240 inclusion remains conditional on its completed finish record after #250/#243 are integrated and gated.
Author
Owner

Integrated into release-9-2 at c996c8d2bd; final fast, layout/review and real-server checks PASS; 60-membership gate 10/10, protocol closes 0. Artifact hashes and complete final receipts on #24. No deploy.

Integrated into release-9-2 at c996c8d2bd5d54ee3f66e0b7707c22c89b4cddac; final fast, layout/review and real-server checks PASS; 60-membership gate 10/10, protocol closes 0. Artifact hashes and complete final receipts on #24. No deploy.
Author
Owner

Orchestrator: release 9.2 deployed at c996c8d2b (release 9.1 + #250 + #243 p2/p3 + unified layout snapshot recovery). #240 was not ready and goes into the next release.

  • Restarted 03:57:57 UTC (09:27 IST, 2026-10-21). MainPID 169391; /proc/PID/exe sha256 edb2b0c0…7f0 matches the release artifact; /healthz ok; no errors in the journal.
  • Sizes are unchanged from 9.1: 21,387,248 / 19,559,400 B. The 60-membership gate is 10/10 with zero protocol closes. The real-server lane is 29 passed with 1 opt-in timing skip.
  • Backup: /var/backups/infraternal/20261021-055753-c996c8d2b…
  • release-prod-live → c996c8d2b.
  • Orchestrator diff read: the always-insert EndedStreams (6dd98ce4a) stays bounded. A transient close reattaches on the same stream id (AttachTerm clears the entry), and a window close sends Close because attachedOnSocket still holds the id. The layout #resyncing flag cannot stick: errors and gaps keep a single jittered timer (250 ms → 5 s) until a snapshot arrives.
  • The CA is locked again by this restart; owner unlock needed.
Orchestrator: **release 9.2 deployed** at c996c8d2b (release 9.1 + #250 + #243 p2/p3 + unified layout snapshot recovery). #240 was not ready and goes into the next release. - Restarted 03:57:57 UTC (09:27 IST, 2026-10-21). MainPID 169391; `/proc/PID/exe` sha256 edb2b0c0…7f0 matches the release artifact; `/healthz` ok; no errors in the journal. - Sizes are unchanged from 9.1: 21,387,248 / 19,559,400 B. The 60-membership gate is 10/10 with zero protocol closes. The real-server lane is 29 passed with 1 opt-in timing skip. - Backup: /var/backups/infraternal/20261021-055753-c996c8d2b… - `release-prod-live` → c996c8d2b. - Orchestrator diff read: the always-insert `EndedStreams` (6dd98ce4a) stays bounded. A transient close reattaches on the same stream id (AttachTerm clears the entry), and a window close sends Close because `attachedOnSocket` still holds the id. The layout `#resyncing` flag cannot stick: errors and gaps keep a single jittered timer (250 ms → 5 s) until a snapshot arrives. - The CA is locked again by this restart; owner unlock needed.
Author
Owner

Hunt 9.3: browser layout sync (read-only, prod abedd62b0)

Scope: apps/tracer/src/canvas/model/{server-store,journal,reconcile,sync}.ts, apps/tracer/src/connection.ts (subscribe/resync, call rejection), server crates/infraternal-server/src/canvas_store.rs (events/receipts) and the subscription generation stamp in infraternal-plugin-api.
Branch hunt-sync-93 (base abedd62b0, head 1b66e86a3), tests only, no fixes. Probe file: apps/tracer/src/canvas/model/hunt-sync-93.test.ts.

$ bun test src/canvas/model/hunt-sync-93.test.ts
(fail) an edit the reconnect snapshot already contains is not painted over newer shared state
(fail) an offline edit in one tab survives another tab writing the shared journal cache
 0 pass
 2 fail

1. P1: two tabs overwrite each other's durable journal, so offline edits are lost (failing test)

  • Where: server-store.ts:29-33 (both tabs use canvasKey(account)), account-storage.ts:65-68 (flush writes the whole journal: canonical, pending, unresolved). Nothing listens for storage events or merges.
  • Sequence: tab A and tab B are open on one account. A goes offline (or isWelcomed === false) and the person edits in A, which writes its pending op to the key. B writes its cache later (any edit, its 300 ms coalesced write, or flush on hide). iOS discards background tab A. A reloads and restores B's journal.
  • User sees: the offline edit in A is silently gone. There is no toast. Also, A adopts B's pending and unresolved sets. Resending B's ops is harmless because the server dedups by op_id receipt (canvas_store.rs:402). But A now holds B's placeholder IDs as unresolved, and journal.ts:45 holds A's queue behind an unresolved open. I have not checked whether that queue drains.
  • Test: an offline edit in one tab survives another tab writing the shared journal cache gets "Console" where it expects "Offline edit".

2. P2: after a reconnect, an already-applied edit is painted over newer shared state (failing test)

  • Where: journal.ts:25-28. A snapshot replaces canonical but carries no op_ids, so it cannot prune pending entries it already contains. journal.ts:37 (restart) and server-store.ts:107 (the epoch guard) throw away the late receipt.
  • Sequence: the person renames a view, and the call is sent. The server applies it at r2. Another device renames it at r3. The socket drops before the receipt or the r2 event arrives (connection.ts:570 rejects the call, and fail() runs). On reconnect, the snapshot at r3 is accepted, but the pending rename is still unacknowledged, so current() replays it on top of r3. The journal resends it, and the server returns the deduplicated receipt r2, which only then prunes it.
  • User sees: their own stale edit wins over the other device's newer one for at least one round trip, then the layout jumps to the newer one. It lasts longer if the pump is held: by #resyncing, by an unresolved open at the head of the queue, or by 4 entries already in flight. The test suite exercises open/close and reduce for an already-present window, and those paths are idempotent. A move, resize or weight change is not, so for those the window visibly jumps back.
  • Test: an edit the reconnect snapshot already contains is not painted over newer shared state gets "Mine" where it expects "Theirs".

3. P3: an error toast on every brief drop while an edit is in flight

  • Where: connection.ts:570 rejects all calls with "connection lost". server-store.ts:120-123 then runs fail() and calls refused() once per in-flight call (up to 4), and product.ts:128 shows the error toast "Layout changes are waiting to sync. Reconnect to try again." on each call.
  • User sees: a red caution toast that asks them to reconnect, although the reconnect and the resend are both automatic and usually finish within about 10 ms to 1 s. The toast slot replaces its message, so they see one toast, refreshed up to 4 times. This hurts predictability: an error appears for something that heals itself. I dropped the probe test because the visible effect is a single toast, and that is a copy or policy decision.
  • Where: server-store.ts:34-42 together with :85-96. onOpen arms the resync timer with target = Infinity and a 500-750 ms delay. If the snapshot has not arrived by then, the timer runs #off.resync(), which sends another Subscribe and calls journal.restart() (epoch++). onOpen re-arms at about 1-1.5 s, then 2-3 s, and so on.
  • Sequence: a mobile reconnect from India with a large layout, or a slow server snapshot read (for example the recovery repair path at canvas_store.rs:91-96), takes longer than about 600 ms.
  • User sees: the canvas is held longer. Each extra Subscribe makes the server read and send another full snapshot, and those bytes queue ahead on the same socket. The backoff doubles each time, so it does converge, but it costs latency exactly where we optimise (India↔DE). Not tested.

5. P3: a revision gap freezes shared layout for at least 250-375 ms plus a round trip

  • Where: server-store.ts:61-64. After a gap, every operation is dropped while #resyncing is set, and the timer must fire before the Subscribe goes out. The first gap could subscribe again at once and back off only after that. Low impact, because gaps are rare: the server serves from a cursor in order (canvas_store.rs:61-111), so a gap needs a dropped or malformed event.

Checked, no defect found

  • Snapshot versus delta order: snapshot and tail come from one SQLite read (canvas_store.rs:66) on one FIFO socket. A repeated Subscribe replaces the old one by generation (plugin-api lib.rs:126-137). An op at or below canonical is ignored (journal.ts:24,30).
  • A stream closing while a retry is pending: in-flight calls are rejected (connection.ts:441,570), restart() voids late receipts, and resends are safe because of the op_id receipts.
  • dispose during a pending resync clears the timer and voids the in-flight promises through #disposed.
  • Clock jumps: the layout timers are relative setTimeout calls, and liveness uses performance.now(). No wall-clock comparison on this path.
  • Background throttling (iPhone): nothing nudges a resync when the page becomes visible. Recovery relies on the overdue timer or the socket drop. iOS normally kills the socket, so the onOpen path covers this. Minor waste: while offline after a failed call, the resync timer keeps waking every 5 s or less, and resync() does nothing when not welcomed (connection.ts:296).

Gate: not run. This branch adds failing tests on purpose, so scripts/verify fast would be red by design. No fix and no deploy.

## Hunt 9.3: browser layout sync (read-only, prod `abedd62b0`) Scope: `apps/tracer/src/canvas/model/{server-store,journal,reconcile,sync}.ts`, `apps/tracer/src/connection.ts` (subscribe/resync, call rejection), server `crates/infraternal-server/src/canvas_store.rs` (events/receipts) and the subscription generation stamp in `infraternal-plugin-api`. Branch `hunt-sync-93` (base `abedd62b0`, head `1b66e86a3`), tests only, no fixes. Probe file: `apps/tracer/src/canvas/model/hunt-sync-93.test.ts`. ``` $ bun test src/canvas/model/hunt-sync-93.test.ts (fail) an edit the reconnect snapshot already contains is not painted over newer shared state (fail) an offline edit in one tab survives another tab writing the shared journal cache 0 pass 2 fail ``` ### 1. P1: two tabs overwrite each other's durable journal, so offline edits are lost (failing test) - Where: `server-store.ts:29-33` (both tabs use `canvasKey(account)`), `account-storage.ts:65-68` (`flush` writes the whole journal: canonical, pending, unresolved). Nothing listens for `storage` events or merges. - Sequence: tab A and tab B are open on one account. A goes offline (or `isWelcomed === false`) and the person edits in A, which writes its pending op to the key. B writes its cache later (any edit, its 300 ms coalesced write, or `flush` on hide). iOS discards background tab A. A reloads and restores **B's** journal. - User sees: the offline edit in A is silently gone. There is no toast. Also, A adopts B's `pending` and `unresolved` sets. Resending B's ops is harmless because the server dedups by `op_id` receipt (`canvas_store.rs:402`). But A now holds B's placeholder IDs as unresolved, and `journal.ts:45` holds A's queue behind an unresolved open. I have not checked whether that queue drains. - Test: `an offline edit in one tab survives another tab writing the shared journal cache` gets "Console" where it expects "Offline edit". ### 2. P2: after a reconnect, an already-applied edit is painted over newer shared state (failing test) - Where: `journal.ts:25-28`. A snapshot replaces canonical but carries no `op_id`s, so it cannot prune pending entries it already contains. `journal.ts:37` (`restart`) and `server-store.ts:107` (the epoch guard) throw away the late receipt. - Sequence: the person renames a view, and the call is sent. The server applies it at r2. Another device renames it at r3. The socket drops before the receipt or the r2 event arrives (`connection.ts:570` rejects the call, and `fail()` runs). On reconnect, the snapshot at r3 is accepted, but the pending rename is still unacknowledged, so `current()` replays it on top of r3. The journal resends it, and the server returns the deduplicated receipt r2, which only then prunes it. - User sees: their own stale edit wins over the other device's newer one for at least one round trip, then the layout jumps to the newer one. It lasts longer if the pump is held: by `#resyncing`, by an unresolved open at the head of the queue, or by 4 entries already in flight. The test suite exercises open/close and `reduce` for an already-present window, and those paths are idempotent. A move, resize or weight change is not, so for those the window visibly jumps back. - Test: `an edit the reconnect snapshot already contains is not painted over newer shared state` gets "Mine" where it expects "Theirs". ### 3. P3: an error toast on every brief drop while an edit is in flight - Where: `connection.ts:570` rejects all calls with "connection lost". `server-store.ts:120-123` then runs `fail()` and calls `refused()` once per in-flight call (up to 4), and `product.ts:128` shows the error toast "Layout changes are waiting to sync. Reconnect to try again." on each call. - User sees: a red caution toast that asks them to reconnect, although the reconnect and the resend are both automatic and usually finish within about 10 ms to 1 s. The toast slot replaces its message, so they see one toast, refreshed up to 4 times. This hurts predictability: an error appears for something that heals itself. I dropped the probe test because the visible effect is a single toast, and that is a copy or policy decision. ### 4. P3: on a reconnect over a slow link, the client keeps subscribing again - Where: `server-store.ts:34-42` together with `:85-96`. `onOpen` arms the resync timer with `target = Infinity` and a 500-750 ms delay. If the snapshot has not arrived by then, the timer runs `#off.resync()`, which sends another Subscribe and calls `journal.restart()` (epoch++). `onOpen` re-arms at about 1-1.5 s, then 2-3 s, and so on. - Sequence: a mobile reconnect from India with a large layout, or a slow server snapshot read (for example the recovery repair path at `canvas_store.rs:91-96`), takes longer than about 600 ms. - User sees: the canvas is held longer. Each extra Subscribe makes the server read and send another full snapshot, and those bytes queue ahead on the same socket. The backoff doubles each time, so it does converge, but it costs latency exactly where we optimise (India↔DE). Not tested. ### 5. P3: a revision gap freezes shared layout for at least 250-375 ms plus a round trip - Where: `server-store.ts:61-64`. After a gap, every operation is dropped while `#resyncing` is set, and the timer must fire before the Subscribe goes out. The first gap could subscribe again at once and back off only after that. Low impact, because gaps are rare: the server serves from a cursor in order (`canvas_store.rs:61-111`), so a gap needs a dropped or malformed event. ### Checked, no defect found - Snapshot versus delta order: snapshot and tail come from one SQLite read (`canvas_store.rs:66`) on one FIFO socket. A repeated Subscribe replaces the old one by generation (`plugin-api lib.rs:126-137`). An op at or below canonical is ignored (`journal.ts:24,30`). - A stream closing while a retry is pending: in-flight calls are rejected (`connection.ts:441,570`), `restart()` voids late receipts, and resends are safe because of the `op_id` receipts. - `dispose` during a pending resync clears the timer and voids the in-flight promises through `#disposed`. - Clock jumps: the layout timers are relative `setTimeout` calls, and liveness uses `performance.now()`. No wall-clock comparison on this path. - Background throttling (iPhone): nothing nudges a resync when the page becomes visible. Recovery relies on the overdue timer or the socket drop. iOS normally kills the socket, so the `onOpen` path covers this. Minor waste: while offline after a failed call, the resync timer keeps waking every 5 s or less, and `resync()` does nothing when not welcomed (`connection.ts:296`). Gate: not run. This branch adds failing tests on purpose, so `scripts/verify fast` would be red by design. No fix and no deploy.
Author
Owner

fix-sync-journal: both hunt-9.3 sync defects fixed (P1 + P2)

Branch fix-sync-journal (base 1b66e86a3 = hunt-sync-93 on prod abedd62b0), head c64797a0b. Pushed this branch only. Nothing went to dev and nothing was deployed.

P1, tabs overwrote the shared journal (08e814f93)

  • The shared key infraternal.canvas.<account> stays. It is only the offline drawing cache, where the last writer winning does no harm.
  • Retry state moves to a per-page key infraternal.canvas-journal.<account>.<page> (the page id is random for each store). Only that page writes it.
  • When a page starts, it does these steps in order:
    1. Reads every journal key of the account plus the shared cache.
    2. Merges them by op_id over the newest canonical revision (mergeLayoutCaches in cache.ts).
    3. Writes the merged result under its own key straight away.
    4. Only then deletes the keys it adopted.
  • So the number of keys stays at the number of live pages plus pages that died since the last start.
  • Two live tabs can send the same entry. This is safe because the server applies an op_id at most once (canvas_store.rs receipts).
  • Unsent births of placeholder windows are dropped on adoption, and their placeholder ids are not adopted. Only the page that made a placeholder could ever fill in its target, and a placeholder at the head of the queue would hold back every later edit.
  • Sign-out (clearAccountStorage) now also removes the per-page keys.
  • Rejected:
    • Merge-on-save into one key: two live tabs race on read-modify-write, and deleted entries come back.
    • Storage events: they do not fire for a discarded tab.

P2, reconnect snapshot repainted an applied edit (c64797a0b, client only, no wire change)

  • When a snapshot is accepted, every pending entry that was sent but has no receipt is marked held.
  • A held entry is resent with the same input and op_id, but it is not painted until its receipt comes back:
    • if the receipt revision is at or below the baseline, the entry is pruned;
    • if it is above, the entry paints again.
  • Cost: after a reconnect, an edit the server had not applied is invisible for one round trip.
  • Follow-up, if that gap shows up in use (wire change, not done):
    • subscribe sends the client's pending op_ids.
    • The snapshot answers with the ones canvas_receipts already holds.
    • The client prunes those and paints the rest.
    • This touches contracts/wire.md (canvas.layout.snapshot), the subscription filter and canvas_store.rs::events.

Tests (apps/tracer)

$ bun test src/canvas/model/hunt-sync-93.test.ts
 2 pass
 0 fail
 3 expect() calls
Ran 2 tests across 1 file. [30.00ms]

$ bun test src/canvas src/account-storage.test.ts src/offline-drawing.test.ts
 281 pass
 0 fail
 19689 expect() calls
Ran 281 tests across 44 files. [23.66s]

scripts/verify fast is running now. Its output follows in a separate comment.

What is left

  • A dedicated unit test that an unapplied held edit paints again after its receipt. The receipt path is covered only indirectly by the existing journal and server-store tests.
  • Break-it review of both commits.
  • The P2 wire variant above, only if the one-round-trip gap matters.
## fix-sync-journal: both hunt-9.3 sync defects fixed (P1 + P2) Branch `fix-sync-journal` (base `1b66e86a3` = hunt-sync-93 on prod `abedd62b0`), head `c64797a0b`. Pushed this branch only. Nothing went to dev and nothing was deployed. ### P1, tabs overwrote the shared journal (`08e814f93`) - The shared key `infraternal.canvas.<account>` stays. It is only the offline drawing cache, where the last writer winning does no harm. - Retry state moves to a per-page key `infraternal.canvas-journal.<account>.<page>` (the page id is random for each store). Only that page writes it. - When a page starts, it does these steps in order: 1. Reads every journal key of the account plus the shared cache. 2. Merges them by `op_id` over the newest canonical revision (`mergeLayoutCaches` in cache.ts). 3. Writes the merged result under its own key straight away. 4. Only then deletes the keys it adopted. - So the number of keys stays at the number of live pages plus pages that died since the last start. - Two live tabs can send the same entry. This is safe because the server applies an `op_id` at most once (canvas_store.rs receipts). - Unsent births of placeholder windows are dropped on adoption, and their placeholder ids are not adopted. Only the page that made a placeholder could ever fill in its target, and a placeholder at the head of the queue would hold back every later edit. - Sign-out (`clearAccountStorage`) now also removes the per-page keys. - Rejected: - Merge-on-save into one key: two live tabs race on read-modify-write, and deleted entries come back. - Storage events: they do not fire for a discarded tab. ### P2, reconnect snapshot repainted an applied edit (`c64797a0b`, client only, no wire change) - When a snapshot is accepted, every pending entry that was sent but has no receipt is marked `held`. - A held entry is resent with the same input and `op_id`, but it is not painted until its receipt comes back: - if the receipt revision is at or below the baseline, the entry is pruned; - if it is above, the entry paints again. - Cost: after a reconnect, an edit the server had *not* applied is invisible for one round trip. - Follow-up, if that gap shows up in use (wire change, not done): - `subscribe` sends the client's pending `op_id`s. - The snapshot answers with the ones `canvas_receipts` already holds. - The client prunes those and paints the rest. - This touches `contracts/wire.md` (canvas.layout.snapshot), the subscription filter and `canvas_store.rs::events`. ### Tests (apps/tracer) ``` $ bun test src/canvas/model/hunt-sync-93.test.ts 2 pass 0 fail 3 expect() calls Ran 2 tests across 1 file. [30.00ms] $ bun test src/canvas src/account-storage.test.ts src/offline-drawing.test.ts 281 pass 0 fail 19689 expect() calls Ran 281 tests across 44 files. [23.66s] ``` `scripts/verify fast` is running now. Its output follows in a separate comment. ### What is left - A dedicated unit test that an unapplied held edit paints again after its receipt. The receipt path is covered only indirectly by the existing journal and server-store tests. - Break-it review of both commits. - The P2 wire variant above, only if the one-round-trip gap matters.
Author
Owner

fix-sync-journal: handover at the deadline (13:54 CEST / 17:24 IST)

Head is now 5aa52818d. It adds test(tracer): a held layout edit resolves by its receipt (#250 P2), a direct test of the receipt path. A held edit whose receipt lands at or below the snapshot revision is pruned. One whose receipt is newer is painted again. Both cases still resend the same op_id.

$ bun test src/canvas/model/journal.test.ts src/canvas/model/hunt-sync-93.test.ts
 4 pass
 0 fail
 16 expect() calls
Ran 4 tests across 2 files. [87.00ms]

scripts/verify fast is not finished. It started at 13:36 CEST in .worktrees/fix-sync-journal from a cold Rust build and is still in the Rust test stage. Every test result: line so far reads ok. N passed; 0 failed. No row table has been printed yet. The full output is in the orchestrator scratchpad at verify.txt.

Next steps:

  1. Read the end of verify.txt and post the table here verbatim, or re-run scripts/verify fast in the worktree.
  2. Run the break-it review of 08e814f93 (per-page journals) and c64797a0b (held entries).
  3. Do the P2 wire variant (subscribe carries pending op_ids, snapshot answers the ones already applied) only if the one-round-trip gap after a reconnect matters in practice.

Only fix-sync-journal was pushed. Nothing went to dev and nothing was deployed.

## fix-sync-journal: handover at the deadline (13:54 CEST / 17:24 IST) Head is now `5aa52818d`. It adds `test(tracer): a held layout edit resolves by its receipt (#250 P2)`, a direct test of the receipt path. A held edit whose receipt lands at or below the snapshot revision is pruned. One whose receipt is newer is painted again. Both cases still resend the same `op_id`. ``` $ bun test src/canvas/model/journal.test.ts src/canvas/model/hunt-sync-93.test.ts 4 pass 0 fail 16 expect() calls Ran 4 tests across 2 files. [87.00ms] ``` **`scripts/verify fast` is not finished.** It started at 13:36 CEST in `.worktrees/fix-sync-journal` from a cold Rust build and is still in the Rust test stage. Every `test result:` line so far reads `ok. N passed; 0 failed`. No row table has been printed yet. The full output is in the orchestrator scratchpad at `verify.txt`. **Next steps:** 1. Read the end of `verify.txt` and post the table here verbatim, or re-run `scripts/verify fast` in the worktree. 2. Run the break-it review of `08e814f93` (per-page journals) and `c64797a0b` (held entries). 3. Do the P2 wire variant (subscribe carries pending `op_id`s, snapshot answers the ones already applied) only if the one-round-trip gap after a reconnect matters in practice. Only `fix-sync-journal` was pushed. Nothing went to dev and nothing was deployed.
Author
Owner

scripts/verify fast on 5aa52818d: cut off by my time limit, no result

My 20-minute timeout 1200 stopped scripts/verify fast (exit=124) during tests/vt_credit.rs, before it printed a table. Every Rust test result: line up to that point read ok. N passed; 0 failed. The last ones:

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.25s
test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.27s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s
     Running tests/vt_credit.rs (target/debug/deps/vt_credit-b71b4d74b7af8b72)
running 1 test
exit=124

The gate has not passed yet. Next step: re-run scripts/verify fast in .worktrees/fix-sync-journal with no timeout. The build cache is warm now.

## `scripts/verify fast` on `5aa52818d`: cut off by my time limit, no result My 20-minute `timeout 1200` stopped `scripts/verify fast` (exit=124) during `tests/vt_credit.rs`, before it printed a table. Every Rust `test result:` line up to that point read `ok. N passed; 0 failed`. The last ones: ``` test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.25s test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.27s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s Running tests/vt_credit.rs (target/debug/deps/vt_credit-b71b4d74b7af8b72) running 1 test exit=124 ``` **The gate has not passed yet.** Next step: re-run `scripts/verify fast` in `.worktrees/fix-sync-journal` with no timeout. The build cache is warm now.
Author
Owner

Break-it review started: branch review-sync-journal, base/review head 5aa52818d7; reviewing only 1b66e86a3..5aa52818d. Independent view formed from diff before reading author comments. Investigating read/delete concurrency, failed-write adoption, dropped-anchor dependencies and held-edit ordering. Frozen tracer install passed. Full scripts/verify fast running on the unmodified review head. No fixes or deploy.

Break-it review started: branch review-sync-journal, base/review head 5aa52818d7864ec00c5616efec9f8ece25992e99; reviewing only 1b66e86a3..5aa52818d. Independent view formed from diff before reading author comments. Investigating read/delete concurrency, failed-write adoption, dropped-anchor dependencies and held-edit ordering. Frozen tracer install passed. Full scripts/verify fast running on the unmodified review head. No fixes or deploy.
Author
Owner

Independent review: HOLD. Five deterministic Bun regressions now fail on unchanged 5aa52818d (0 pass / 5 fail, 10 assertions); tests are staged outside the checkout until the exact-head fast run finishes. No author comments were read before the independent hypotheses were recorded.

P1 — concurrent durable edit deleted: server-store.ts:38–45. B reads A’s key, then A saves+flushes a rename before B writes its union. B deletes A’s newer key and flushes its older drawing; A is discarded. Reload returns Console instead of Edit flushed by live page. Storage-call interleaving models independent pages; no operation is interrupted.

P1 — failed replacement still deletes source: server-store.ts:45. A’s per-page key holds the only durable edit while another page has overwritten the shared drawing. setItem throws QuotaExceededError; writeStoredJson swallows it, then removeStored deletes A’s key. Expected retained source; actual null.

P1 — dropped placeholder loses resolved child: cache.ts:62–67. Offline parent birth is unresolved; child split already references a real session and waits behind it. Adoption drops parent but retains split(anchor_id=parent). Reduction silently omits child; validation accepts empty layout. Expected resolved-child; actual [].

P2 — held receipt changes projection without notifying: journal.ts:75–79 / server-store.ts:122. Send rename, reconnect+snapshot hides it, resolve current-epoch retry at revision2 over canonical1. current() becomes Mine but subscriber’s last drawing stays Console; acknowledge returns false because nothing pruned. Repair depends on later event/snapshot.

P2 — live-tab write recreates signed-out journal: server-store.ts:110,139–141 / account-storage.ts:65. A disposes and clears account storage; B remains live and flushes, recreating one per-page key (expected0, actual1). Cross-tab invalidation is absent. The shared-cache form is inherited; this delta extends it to the new durable journal. D245 remains unmet across tabs.

review-probe.log

Full fast still compiling native code; no fixes/deploy. Atomic failing-test commits will follow.

Independent review: HOLD. Five deterministic Bun regressions now fail on unchanged 5aa52818d (0 pass / 5 fail, 10 assertions); tests are staged outside the checkout until the exact-head fast run finishes. No author comments were read before the independent hypotheses were recorded. P1 — concurrent durable edit deleted: server-store.ts:38–45. B reads A’s key, then A saves+flushes a rename before B writes its union. B deletes A’s newer key and flushes its older drawing; A is discarded. Reload returns Console instead of Edit flushed by live page. Storage-call interleaving models independent pages; no operation is interrupted. P1 — failed replacement still deletes source: server-store.ts:45. A’s per-page key holds the only durable edit while another page has overwritten the shared drawing. setItem throws QuotaExceededError; writeStoredJson swallows it, then removeStored deletes A’s key. Expected retained source; actual null. P1 — dropped placeholder loses resolved child: cache.ts:62–67. Offline parent birth is unresolved; child split already references a real session and waits behind it. Adoption drops parent but retains split(anchor_id=parent). Reduction silently omits child; validation accepts empty layout. Expected resolved-child; actual []. P2 — held receipt changes projection without notifying: journal.ts:75–79 / server-store.ts:122. Send rename, reconnect+snapshot hides it, resolve current-epoch retry at revision2 over canonical1. current() becomes Mine but subscriber’s last drawing stays Console; acknowledge returns false because nothing pruned. Repair depends on later event/snapshot. P2 — live-tab write recreates signed-out journal: server-store.ts:110,139–141 / account-storage.ts:65. A disposes and clears account storage; B remains live and flushes, recreating one per-page key (expected0, actual1). Cross-tab invalidation is absent. The shared-cache form is inherited; this delta extends it to the new durable journal. D245 remains unmet across tabs. [review-probe.log](https://git.kayg.org/attachments/a10b9ef6-6c6d-4377-b9ce-7153e16cee16) Full fast still compiling native code; no fixes/deploy. Atomic failing-test commits will follow.
Author
Owner

Additional P1: cache.ts:60–62 marks an op_id seen before dropping an unresolved copy, suppressing a later completed copy of the same birth. Sequence: offline unresolved birth is persisted to both caches; target resolves to real-session; shared drawing flush succeeds while the per-page write fails (or page stops between flushes). On reload the stale per-page entry is skipped but reserves its op_id; the complete shared entry is then ignored. Expected real-session membership; actual no windows. Separate regression fails.
reference-copy.log

Controls: 4 pass / 0 fail / 311 assertions. Interruption after successful union write leaves two safe copies; 100 subsequent reloads retain exactly 1 journal key and 1 pending op. Fully blocked localStorage (SecurityError getter) preserves live in-memory edits. Two reconnects reject both older-epoch receipts; current retry prunes by its actual revision. A held edit with no Result resolves normally via its ordered event. No claim of a browser private-mode run or performance measurement.
controls.log
all-review-probes.log

Strict probe types pass. Existing store harness plus first five regressions:23 pass /5 fail. Keeping requested exact-head gate unmodified until completion, then committing each failing case separately.

Additional P1: cache.ts:60–62 marks an op_id seen before dropping an unresolved copy, suppressing a later completed copy of the same birth. Sequence: offline unresolved birth is persisted to both caches; target resolves to real-session; shared drawing flush succeeds while the per-page write fails (or page stops between flushes). On reload the stale per-page entry is skipped but reserves its op_id; the complete shared entry is then ignored. Expected real-session membership; actual no windows. Separate regression fails. [reference-copy.log](https://git.kayg.org/attachments/5078cdd6-7f89-418d-8a5c-1e8f2a1528c6) Controls: 4 pass / 0 fail / 311 assertions. Interruption after successful union write leaves two safe copies; 100 subsequent reloads retain exactly 1 journal key and 1 pending op. Fully blocked localStorage (SecurityError getter) preserves live in-memory edits. Two reconnects reject both older-epoch receipts; current retry prunes by its actual revision. A held edit with no Result resolves normally via its ordered event. No claim of a browser private-mode run or performance measurement. [controls.log](https://git.kayg.org/attachments/6fcefdc0-a646-430c-974e-9d023cd82f1f) [all-review-probes.log](https://git.kayg.org/attachments/4ed9f290-93dd-47b2-89f9-52ed965cad7b) Strict probe types pass. Existing store harness plus first five regressions:23 pass /5 fail. Keeping requested exact-head gate unmodified until completion, then committing each failing case separately.
Author
Owner

Exact-head fast progress: server tests621 passed /1 failed /52 ignored. The only failure is auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply, expecting16 closes but observing9 (review_authority_cap.rs:162). Gate continues to static checks.
Detached origin/dev control ee3dab0185: the same exact socket test passes1/1 in isolation. Therefore the brief’s same-failure baseline exception is NOT satisfied; no waiver claimed. Rechecking the exact review-head executable in isolation and final head gate will use RUST_TEST_THREADS=1. This native source is unchanged in 1b66e86a3..5aa52818d. No production edits.
baseline-auth-cap.log
baseline-context.txt

Exact-head fast progress: server tests621 passed /1 failed /52 ignored. The only failure is auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply, expecting16 closes but observing9 (review_authority_cap.rs:162). Gate continues to static checks. Detached origin/dev control ee3dab0185916c0709336a5a7c7ef5c5baa9b370: the same exact socket test passes1/1 in isolation. Therefore the brief’s same-failure baseline exception is NOT satisfied; no waiver claimed. Rechecking the exact review-head executable in isolation and final head gate will use RUST_TEST_THREADS=1. This native source is unchanged in 1b66e86a3..5aa52818d. No production edits. [baseline-auth-cap.log](https://git.kayg.org/attachments/b6c76082-e9a8-457f-acd7-c467e8a4b84a) [baseline-context.txt](https://git.kayg.org/attachments/cbe85e43-3fed-4371-bdc9-394e7238e460)
Author
Owner

Requested exact-head scripts/verify fast completed at unchanged5aa52818d7864ec00c5616efec9f8ece25992e99, exit1. Eight Rust rows PASS; test FAIL(101) solely for the socket-cap case already recorded (621/1/52 in the server batch). Both detached dev and exact-head isolated controls pass, so no baseline waiver is claimed. Frontend dispatch is skipped when the Rust function returns failure. No checkout changes occurred during this run. Verbatim summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | FAIL (101)   |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

scripts/verify fast exit=1

verify-fast-5aa52818d.log
verify-fast-5aa52818d-summary.txt
head-auth-cap-isolated.log

Requested exact-head scripts/verify fast completed at unchanged5aa52818d7864ec00c5616efec9f8ece25992e99, exit1. Eight Rust rows PASS; test FAIL(101) solely for the socket-cap case already recorded (621/1/52 in the server batch). Both detached dev and exact-head isolated controls pass, so no baseline waiver is claimed. Frontend dispatch is skipped when the Rust function returns failure. No checkout changes occurred during this run. Verbatim summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | FAIL (101) | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ scripts/verify fast exit=1 ``` [verify-fast-5aa52818d.log](https://git.kayg.org/attachments/27b69e97-acc2-4d08-9ad7-70528bdb4a67) [verify-fast-5aa52818d-summary.txt](https://git.kayg.org/attachments/163245b3-073b-46cb-95a5-24436b9ab589) [head-auth-cap-isolated.log](https://git.kayg.org/attachments/8f155220-89a3-4b10-b86f-67db917ddb82)
Author
Owner

Review regression committed/pushed: 1a96522652 on review-sync-journal (adoption-race). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 1a965226520f53a22ae07988f91df60008c97c8f on review-sync-journal (adoption-race). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

Review regression committed/pushed: 4d88a9d94b on review-sync-journal (adoption-quota). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 4d88a9d94bc287ee0edf4d60f1250e509ecfbee7 on review-sync-journal (adoption-quota). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

Review regression committed/pushed: fbaf4a6b6f on review-sync-journal (adoption-child). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: fbaf4a6b6f8a92da64e862498e86f129d1e24f29 on review-sync-journal (adoption-child). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

Review regression committed/pushed: 83e97f9eb4 on review-sync-journal (adoption-reference). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 83e97f9eb45a253716505318ee0db398e8386c3b on review-sync-journal (adoption-reference). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

Review regression committed/pushed: 78f8db3ef8 on review-sync-journal (held-paint). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 78f8db3ef8809eb7d6bca2ebac11fe318d817060 on review-sync-journal (held-paint). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

Review regression committed/pushed: 4c9320601f on review-sync-journal (signout-write). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 4c9320601f187c8847199bfdeae695a0f2d1b818 on review-sync-journal (signout-write). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

All six independent failing-test commits are pushed to review-sync-journal, head4c9320601f187c8847199bfdeae695a0f2d1b818; worktree clean. Only server-store.test.ts changed (+108/-1), reusing the existing fixture. Combined store suite:23 pass /6 intentional fail /177 assertions; strict tracer bun run check and git diff --check pass. Each commit separately passed fmt/types/diff checks and its one isolated expected failure.

P1 tests:1a9652265 concurrent adoption deletion;4d88a9d94 failed replacement deletion;fbaf4a6b6 missing-anchor child loss;83e97f9eb stale unresolved duplicate suppresses completed birth. P2 tests:78f8db3ef held receipt notification;4c9320601 live-tab write after sign-out (shared-cache form inherited). Test lines417,439,456,472,494,510 respectively. Product finding locations remain on reviewed head:server-store.ts:38/45,cache.ts:60/62,journal.ts:75/server-store.ts:122,server-store.ts:140–142/account-storage.ts:64.

Required exact5aa52818d fast has completed and its failed native row plus verbatim table are attached above. Merge-base static comparison is queued behind the host build slot; final review-head fast will follow with RUST_TEST_THREADS=1. No fixes/deploy.

committed-store-tests.log
final-check.log
commit-map.json

All six independent failing-test commits are pushed to review-sync-journal, head4c9320601f187c8847199bfdeae695a0f2d1b818; worktree clean. Only server-store.test.ts changed (+108/-1), reusing the existing fixture. Combined store suite:23 pass /6 intentional fail /177 assertions; strict tracer bun run check and git diff --check pass. Each commit separately passed fmt/types/diff checks and its one isolated expected failure. P1 tests:1a9652265 concurrent adoption deletion;4d88a9d94 failed replacement deletion;fbaf4a6b6 missing-anchor child loss;83e97f9eb stale unresolved duplicate suppresses completed birth. P2 tests:78f8db3ef held receipt notification;4c9320601 live-tab write after sign-out (shared-cache form inherited). Test lines417,439,456,472,494,510 respectively. Product finding locations remain on reviewed head:server-store.ts:38/45,cache.ts:60/62,journal.ts:75/server-store.ts:122,server-store.ts:140–142/account-storage.ts:64. Required exact5aa52818d fast has completed and its failed native row plus verbatim table are attached above. Merge-base static comparison is queued behind the host build slot; final review-head fast will follow with RUST_TEST_THREADS=1. No fixes/deploy. [committed-store-tests.log](https://git.kayg.org/attachments/b88ebe02-152b-48fb-95f4-6b20021237be) [final-check.log](https://git.kayg.org/attachments/9e42eec7-219f-4253-a2cf-1dc228876ff5) [commit-map.json](https://git.kayg.org/attachments/532f0b86-05a2-4174-92a7-d4a98311a126)
Author
Owner

Additional P2 confirmed while validation waits for build capacity: cache.ts:57–67 / journal.ts:23,115–119. The merged startup state never prunes a pending entry whose known receipt revision is at or below the newest canonical revision. Sequence:A saves Mine at canonical1 and receives receipt2 before its ordered event;B persists a snapshot3 named Theirs;A flushes its older own key again;C reloads both journals offline. C correctly selects canonical3 but draws Mine instead of Theirs by replaying the already-acknowledged entry. A subsequent valid snapshot prunes it, so this is incorrect cached drawing rather than a new server overwrite. Independent regression fails0/1,2 assertions; seventh atomic test commit is being checked. Verdict remains HOLD, now4 P1 +3 P2.

adoption-prune-probe.log

Additional P2 confirmed while validation waits for build capacity: cache.ts:57–67 / journal.ts:23,115–119. The merged startup state never prunes a pending entry whose known receipt revision is at or below the newest canonical revision. Sequence:A saves Mine at canonical1 and receives receipt2 before its ordered event;B persists a snapshot3 named Theirs;A flushes its older own key again;C reloads both journals offline. C correctly selects canonical3 but draws Mine instead of Theirs by replaying the already-acknowledged entry. A subsequent valid snapshot prunes it, so this is incorrect cached drawing rather than a new server overwrite. Independent regression fails0/1,2 assertions; seventh atomic test commit is being checked. Verdict remains HOLD, now4 P1 +3 P2. [adoption-prune-probe.log](https://git.kayg.org/attachments/51f540f2-e829-49d8-95fd-b7b27588d338)
Author
Owner

Review regression committed/pushed: 8bc0cfc6f8 on review-sync-journal (adoption-prune). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.

Review regression committed/pushed: 8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2 on review-sync-journal (adoption-prune). Test-only change; reused existing store fixture. cargo fmt --all --check, tracer bun run check and git diff --check pass. Focused requested regression:0 pass /1 fail (intentional on reviewed implementation). Exact failure receipt will be attached in final review. No fixes/deploy.
Author
Owner

D243 same-recipe x86_64 comparison completed: base1b66e86a3 and reviewed head5aa52818d each21,389,296 B, delta0 B. Both SHA256 e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0: byte-identical. Baseline file is stripped static PIE with no PT_INTERP. Recipe:scripts/static-cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl, one shared job target. No native/build-input change in the review commits.

Final review head8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2 is pushed/clean (seven independent failing-test commits). Updated store result23 pass /7 intentional fail /179 assertions; unchanged cache/journal/hunt tests7/7 pass. Final full fast is queued with RUST_TEST_THREADS=1 and TRACER_TEST_PORT=4287, followed by independent production bundle/transfer checks because intentional failures stop the frontend chain. No fixes/deploy.

static-size-comparison.json
baseline-static-size.log
committed-store-tests.log
unchanged-focused-tests.log

D243 same-recipe x86_64 comparison completed: base1b66e86a3 and reviewed head5aa52818d each21,389,296 B, delta0 B. Both SHA256 e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0: byte-identical. Baseline file is stripped static PIE with no PT_INTERP. Recipe:scripts/static-cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl, one shared job target. No native/build-input change in the review commits. Final review head8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2 is pushed/clean (seven independent failing-test commits). Updated store result23 pass /7 intentional fail /179 assertions; unchanged cache/journal/hunt tests7/7 pass. Final full fast is queued with RUST_TEST_THREADS=1 and TRACER_TEST_PORT=4287, followed by independent production bundle/transfer checks because intentional failures stop the frontend chain. No fixes/deploy. [static-size-comparison.json](https://git.kayg.org/attachments/b35d196a-2930-464a-93de-e8d5ab18fa2b) [baseline-static-size.log](https://git.kayg.org/attachments/082bef6a-caeb-4af7-9239-c137d84bcd07) [committed-store-tests.log](https://git.kayg.org/attachments/dd7504c1-9de2-4c3a-bef7-2def500ec8f2) [unchanged-focused-tests.log](https://git.kayg.org/attachments/4a88a985-6f6c-4243-b7f9-8cc1b2fd7e62)
Author
Owner

Finished review: HOLD — 4 P1, 3 P2. Pushed review-sync-journal at 8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2; remote verified, worktree clean. Seven atomic commits change only server-store.test.ts (+125/-1). No fixes or deployment. Full sequences, test lines and commit mapping are attached in final-findings.txt.

  • P1, server-store.ts:38–45: B reads A, then deletes A's newer durable write; reload loses the edit.
  • P1, server-store.ts:45: replacement write throws quota error, but the only durable source is deleted.
  • P1, cache.ts:62–67: dropped unresolved parent leaves a resolved child split with no anchor; child disappears.
  • P1, cache.ts:60–62: stale unresolved duplicate reserves its ID, suppressing the later completed birth.
  • P2, journal.ts:75–79 / server-store.ts:122: newer held receipt changes current projection without notifying drawing subscribers.
  • P2, server-store.ts:140–142 / account-storage.ts:64: another live page recreates data after sign-out; shared-cache form inherited.
  • P2, cache.ts:57–67: known receipt 2 replays over cached canonical 3 until a snapshot prunes it.

Focused store tests: 23 existing pass, 7 deliberate fail,179 assertions. Unchanged cache/journal/hunt tests 7/7 pass. Four positive control tests pass (311 assertions): successful-write interruption plus a 100-reload key/ID bound; blocked storage; second-reconnect receipts; event recovery without a Result. Tests model storage/transport interleavings in Bun; no real private-mode browser or performance qualification is claimed.

D243 fresh same-recipe x86_64 comparison: baseline 1b66e86a3 and reviewed head 5aa52818d both 21,389,296 B; delta 0 B, byte-identical. Final review-head artifact also matches. Temporary baseline, build target and probe scripts removed; 0 job-owned native executables remain. Evidence retained outside the checkout and attached.

Requested scripts/verify fast on unchanged 5aa52818d completed with exit 1. Its sole native failure observed 9/16 socket closes; detached dev and exact-head isolated controls pass, so no matching-failure waiver was claimed. Verbatim summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | FAIL (101)   |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

scripts/verify fast exit=1

Final full scripts/verify fast on pushed 8bc0cfc6f, with RUST_TEST_THREADS=1, TRACER_TEST_PORT=4287: all 9 Rust rows PASS, including the earlier socket case; frontend 348 pass / 7 intentional fail (only the committed regressions). Production build and transfer checks run separately and both exit 0. Critical transfer: gzip 306880/307200 B; Brotli 255714/256000 B. Verbatim final gate summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+


 348 pass
 7 fail
 21634 expect() calls
Ran 355 tests across 60 files. [32.75s]

scripts/verify fast exit=1 (seven committed review regressions)

The issue stays open.

final-findings.txt
verify-fast-review-head.log
verify-fast-review-head-summary.txt
final-gate-status.json
final-bundle.log
static-size-comparison.json
commit-map.json
self-review.txt
cleanup.json
controls.log

Finished review: **HOLD — 4 P1, 3 P2**. Pushed `review-sync-journal` at `8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2`; remote verified, worktree clean. Seven atomic commits change only `server-store.test.ts` (+125/-1). No fixes or deployment. Full sequences, test lines and commit mapping are attached in `final-findings.txt`. - P1, `server-store.ts:38–45`: B reads A, then deletes A's newer durable write; reload loses the edit. - P1, `server-store.ts:45`: replacement write throws quota error, but the only durable source is deleted. - P1, `cache.ts:62–67`: dropped unresolved parent leaves a resolved child split with no anchor; child disappears. - P1, `cache.ts:60–62`: stale unresolved duplicate reserves its ID, suppressing the later completed birth. - P2, `journal.ts:75–79` / `server-store.ts:122`: newer held receipt changes current projection without notifying drawing subscribers. - P2, `server-store.ts:140–142` / `account-storage.ts:64`: another live page recreates data after sign-out; shared-cache form inherited. - P2, `cache.ts:57–67`: known receipt 2 replays over cached canonical 3 until a snapshot prunes it. Focused store tests: 23 existing pass, 7 deliberate fail,179 assertions. Unchanged cache/journal/hunt tests 7/7 pass. Four positive control tests pass (311 assertions): successful-write interruption plus a 100-reload key/ID bound; blocked storage; second-reconnect receipts; event recovery without a Result. Tests model storage/transport interleavings in Bun; no real private-mode browser or performance qualification is claimed. D243 fresh same-recipe x86_64 comparison: baseline 1b66e86a3 and reviewed head 5aa52818d both 21,389,296 B; delta 0 B, byte-identical. Final review-head artifact also matches. Temporary baseline, build target and probe scripts removed; 0 job-owned native executables remain. Evidence retained outside the checkout and attached. Requested `scripts/verify fast` on unchanged `5aa52818d` completed with exit 1. Its sole native failure observed 9/16 socket closes; detached dev and exact-head isolated controls pass, so no matching-failure waiver was claimed. Verbatim summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | FAIL (101) | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ scripts/verify fast exit=1 ``` Final full `scripts/verify fast` on pushed `8bc0cfc6f`, with `RUST_TEST_THREADS=1`, `TRACER_TEST_PORT=4287`: all 9 Rust rows PASS, including the earlier socket case; frontend 348 pass / 7 intentional fail (only the committed regressions). Production build and transfer checks run separately and both exit 0. Critical transfer: gzip 306880/307200 B; Brotli 255714/256000 B. Verbatim final gate summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 348 pass 7 fail 21634 expect() calls Ran 355 tests across 60 files. [32.75s] scripts/verify fast exit=1 (seven committed review regressions) ``` The issue stays open. [final-findings.txt](https://git.kayg.org/attachments/2c3af940-18e8-4b99-8d5f-fbf2e0a15cfe) [verify-fast-review-head.log](https://git.kayg.org/attachments/537e5c7c-90de-4087-8c70-c5308c84b2f9) [verify-fast-review-head-summary.txt](https://git.kayg.org/attachments/941ce2ef-a5e3-455d-b1fe-9b116008f86e) [final-gate-status.json](https://git.kayg.org/attachments/2cb6c92e-4430-4832-8d7c-0c1d8d2b42ad) [final-bundle.log](https://git.kayg.org/attachments/85198db6-d8ef-4a54-90bd-7bb05ec89a9d) [static-size-comparison.json](https://git.kayg.org/attachments/eeebd5c4-5cef-4ab3-8852-87c5db60e116) [commit-map.json](https://git.kayg.org/attachments/88fd3d58-4b9a-40cc-b691-af829e6dd8c8) [self-review.txt](https://git.kayg.org/attachments/db2918f5-0455-4318-a499-d2c20a051438) [cleanup.json](https://git.kayg.org/attachments/54a1a7d5-69bb-4b6d-b59a-5853b568f5b3) [controls.log](https://git.kayg.org/attachments/2693a029-9ec3-4427-a152-78d098e3f535)
Author
Owner

Starting round 2 on fix-sync-journal-r2, base 8bc0cfc6f8 (origin/review-sync-journal). Read #250 hunt, round-1 and seven-regression review, plus parent #243 history. Reproducing the seven failures before edits. Design direction: immutable journal generations, publish replacement before deleting only immutable source generations; failed writes retain sources. This removes live-owner deletion races without locks or a new dependency. Merge must select completed duplicates, preserve resolved children, and prune covered receipts. No wire change or deployment.

Starting round 2 on fix-sync-journal-r2, base 8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2 (origin/review-sync-journal). Read #250 hunt, round-1 and seven-regression review, plus parent #243 history. Reproducing the seven failures before edits. Design direction: immutable journal generations, publish replacement before deleting only immutable source generations; failed writes retain sources. This removes live-owner deletion races without locks or a new dependency. Merge must select completed duplicates, preserve resolved children, and prune covered receipts. No wire change or deployment.
Author
Owner

Pushed atomic fixes: 260bded78 journal receipt restoration/notifications (11 focused tests, 68 assertions); 49edfa63f completed-birth deduplication and resolved-child recovery (4 review/cancellation tests, 8 assertions; 7 cache/journal/hunt controls, 22 assertions); 503b05301 immutable storage generations (6 adoption/replacement controls, 11 assertions). Baseline reproduced 25 pass / 7 fail. Failed replacement writes now retire nothing; live writes use fresh keys so adoption cannot remove their newer generation. Legacy mutable keys are retained until sign-out. Finishing cross-page sign-out revocation and bounded-generation controls before full gate. No native/dependency/wire changes.

Pushed atomic fixes: 260bded78 journal receipt restoration/notifications (11 focused tests, 68 assertions); 49edfa63f completed-birth deduplication and resolved-child recovery (4 review/cancellation tests, 8 assertions; 7 cache/journal/hunt controls, 22 assertions); 503b05301 immutable storage generations (6 adoption/replacement controls, 11 assertions). Baseline reproduced 25 pass / 7 fail. Failed replacement writes now retire nothing; live writes use fresh keys so adoption cannot remove their newer generation. Legacy mutable keys are retained until sign-out. Finishing cross-page sign-out revocation and bounded-generation controls before full gate. No native/dependency/wire changes.
Author
Owner

Pushed sign-out lifetime/writer fixes e9f4e3eba, 5dfb51503, delayed-event fix 1d17c48ae, startup-publication fix afdbe8be3, and bounded-generation controls 3c08a9912. The requested model/account-storage/offline-drawing suite passed 76 tests / 8838 assertions (real Rust reducer comparisons included); storage controls subsequently pass 39 tests / 506 assertions, plus a 6-test account lifetime run. All seven review regressions and both hunt tests pass. Additional self-review startup-signout regression reproduced before fix: disposal before subscription setup interrupted the sweep; optional subscription teardown and startup cancellation repair it. 100 offline reloads retain exactly one journal key and the original operation ID. Final scripts/verify fast is queued through the build slot at HEAD afdbe8be3, RUST_TEST_THREADS=1, TRACER_TEST_PORT=4292. No timing claims, dependency changes, wire changes or deployment.

Pushed sign-out lifetime/writer fixes e9f4e3eba, 5dfb51503, delayed-event fix 1d17c48ae, startup-publication fix afdbe8be3, and bounded-generation controls 3c08a9912. The requested model/account-storage/offline-drawing suite passed 76 tests / 8838 assertions (real Rust reducer comparisons included); storage controls subsequently pass 39 tests / 506 assertions, plus a 6-test account lifetime run. All seven review regressions and both hunt tests pass. Additional self-review startup-signout regression reproduced before fix: disposal before subscription setup interrupted the sweep; optional subscription teardown and startup cancellation repair it. 100 offline reloads retain exactly one journal key and the original operation ID. Final scripts/verify fast is queued through the build slot at HEAD afdbe8be3, RUST_TEST_THREADS=1, TRACER_TEST_PORT=4292. No timing claims, dependency changes, wire changes or deployment.
Author
Owner

Functional receipts (build-host timings are not performance evidence):
Before: seven reproduced failures
Requested model/account/offline suite: 76 pass, 8838 assertions
Storage/startup controls: 39 pass, 506 assertions
Self-review: checked D180/D183 receipt identity, ordered event/snapshot recovery, failed storage writes, immutable generation ownership, bounded reloads, placeholder dependencies, complete account sweep, late receipts/disposal, module role/invariant comments and unchanged wire/native inputs. Final gate and same-recipe native size comparison remain pending.

Functional receipts (build-host timings are not performance evidence): [Before: seven reproduced failures](https://git.kayg.org/attachments/bd8bc9ca-4f5e-4a61-acee-5c4077abd2b2) [Requested model/account/offline suite: 76 pass, 8838 assertions](https://git.kayg.org/attachments/675b12c0-a33b-42b9-8998-0c96fe055737) [Storage/startup controls: 39 pass, 506 assertions](https://git.kayg.org/attachments/edb8a515-1cea-4207-848a-4bd32f35d33a) Self-review: checked D180/D183 receipt identity, ordered event/snapshot recovery, failed storage writes, immutable generation ownership, bounded reloads, placeholder dependencies, complete account sweep, late receipts/disposal, module role/invariant comments and unchanged wire/native inputs. Final gate and same-recipe native size comparison remain pending.
Author
Owner

Self-review found and reproduced a recovery identity conflict: a live owner could later send its original split under the ID reused by an adopter for a recovered open (different immutable inputs). Fixed in the latest pushed child-identity commit: recovery uses a deterministic disjoint version-0 spelling of the original version-4 UUID; existing recovered entries, including receipts/sent inputs, win. No wire format change (op_id remains a string). Repeated restore is bounded. Focused storage/cache/hunt run: 46 pass / 0 fail / 523 assertions; tracer check, fmt and diff checks pass. Full fast remains in native compile-out checks; all TypeScript changes will be included when its frontend phase runs.

Self-review found and reproduced a recovery identity conflict: a live owner could later send its original split under the ID reused by an adopter for a recovered open (different immutable inputs). Fixed in the latest pushed child-identity commit: recovery uses a deterministic disjoint version-0 spelling of the original version-4 UUID; existing recovered entries, including receipts/sent inputs, win. No wire format change (op_id remains a string). Repeated restore is bounded. Focused storage/cache/hunt run: 46 pass / 0 fail / 523 assertions; tracer check, fmt and diff checks pass. Full fast remains in native compile-out checks; all TypeScript changes will be included when its frontend phase runs.
Author
Owner

Final fast has reached the known native socket-cap flake: auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply is FAILED. Gate remains running, exact assertion is pending the server batch footer. The brief explicitly says to report this named flake rather than chase it here; no native source has changed. Clippy/compile-out/runtime-helper rows passed. Will retain full gate output and run the unchanged frontend gate separately if native failure skips that phase.

Final fast has reached the known native socket-cap flake: auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply is FAILED. Gate remains running, exact assertion is pending the server batch footer. The brief explicitly says to report this named flake rather than chase it here; no native source has changed. Clippy/compile-out/runtime-helper rows passed. Will retain full gate output and run the unchanged frontend gate separately if native failure skips that phase.
Author
Owner

Production bundle finding fixed in the latest pushed module-extraction commit: account lifetime implementation had entered critical JS, measuring gzip 307120/307200 B and Brotli 256086/256000 B (86 B over). Moving implementation to canvas/model/storage-lifetime.ts keeps key creation and the sign-out registry in account-storage.ts. New production measurement: critical gzip 306955/307200 B, Brotli 255741/256000 B; deferred gzip 58474/61440 B, Brotli 51800/55296 B. All caps unchanged. Tracer check + 46 focused tests / 523 assertions pass. No native inputs changed; final fast remains in the server test batch with only the previously named socket-cap failure so far. Frontend gate will run separately after the full native gate finishes.

Production bundle finding fixed in the latest pushed module-extraction commit: account lifetime implementation had entered critical JS, measuring gzip 307120/307200 B and Brotli 256086/256000 B (86 B over). Moving implementation to canvas/model/storage-lifetime.ts keeps key creation and the sign-out registry in account-storage.ts. New production measurement: critical gzip 306955/307200 B, Brotli 255741/256000 B; deferred gzip 58474/61440 B, Brotli 51800/55296 B. All caps unchanged. Tracer check + 46 focused tests / 523 assertions pass. No native inputs changed; final fast remains in the server test batch with only the previously named socket-cap failure so far. Frontend gate will run separately after the full native gate finishes.
Author
Owner

Exact known socket-cap flake confirmed in final fast: auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply, review_authority_cap.rs:162; left 9, right 16. Server batch: 621 passed / 1 failed / 52 ignored. No native source or test was changed, and no baseline waiver is claimed; the brief expressly says to report this case without chasing it. Inode fixture and cargo-deny pass. Static builds are active. Removed this job's now-unused debug/incremental cache after the native test phase to recover disk space. Latest pushed head is 95675d1cc; frontend lifetime extraction has already passed production transfer budgets and 46 focused tests. Full frontend gate remains scheduled after native fast completes.

Exact known socket-cap flake confirmed in final fast: auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply, review_authority_cap.rs:162; left 9, right 16. Server batch: 621 passed / 1 failed / 52 ignored. No native source or test was changed, and no baseline waiver is claimed; the brief expressly says to report this case without chasing it. Inode fixture and cargo-deny pass. Static builds are active. Removed this job's now-unused debug/incremental cache after the native test phase to recover disk space. Latest pushed head is 95675d1cc; frontend lifetime extraction has already passed production transfer budgets and 46 focused tests. Full frontend gate remains scheduled after native fast completes.
Author
Owner

Completed/pushed 664fe59b1: canvas/model/cache.ts gives recovered child opens a stable disjoint retry ID; server-store.test.ts covers a live owner later sending its original split. Completed/pushed 95675d1cc: extracts storage-lifetime.ts so lifetime checks load with the canvas, while account-storage.ts remains the single owner of key construction and sign-out registration. Tracer check, fmt/diff checks and 46 storage/cache/hunt tests pass (523 assertions). Production critical JS is 306955/307200 B gzip and 255741/256000 B Brotli; deferred is 58474/61440 and 51800/55296 B. The initial Brotli overflow was 86 B; no cap changed. Final fast is building static targets; only the named native 9/16 socket-close flake has failed. Full frontend verification and fresh merge-base static size comparison follow this run.

Completed/pushed 664fe59b1: canvas/model/cache.ts gives recovered child opens a stable disjoint retry ID; server-store.test.ts covers a live owner later sending its original split. Completed/pushed 95675d1cc: extracts storage-lifetime.ts so lifetime checks load with the canvas, while account-storage.ts remains the single owner of key construction and sign-out registration. Tracer check, fmt/diff checks and 46 storage/cache/hunt tests pass (523 assertions). Production critical JS is 306955/307200 B gzip and 255741/256000 B Brotli; deferred is 58474/61440 and 51800/55296 B. The initial Brotli overflow was 86 B; no cap changed. Final fast is building static targets; only the named native 9/16 socket-close flake has failed. Full frontend verification and fresh merge-base static size comparison follow this run.
Author
Owner

Additional recovery dependency finding reproduced/fixed in the latest pushed commit: cache.ts reused an existing recovered open at its foreign source position, behind a target intent that originally followed the split. That sent the target before its birth. cache.test.ts now checks recovered-open-before-target order and the resulting new target; before fix 0 pass / 1 fail, after fix both assertions pass. Existing recovery input/receipt metadata stays immutable and the recovered ID is emitted once. Full focused run: 47 pass / 0 fail / 525 assertions; tracer check + fmt/diff checks pass. Current critical transfer: gzip 306955/307200 B, Brotli 255864/256000 B. Native source remains unchanged; aarch64 static build is still active.

Additional recovery dependency finding reproduced/fixed in the latest pushed commit: cache.ts reused an existing recovered open at its foreign source position, behind a target intent that originally followed the split. That sent the target before its birth. cache.test.ts now checks recovered-open-before-target order and the resulting new target; before fix 0 pass / 1 fail, after fix both assertions pass. Existing recovery input/receipt metadata stays immutable and the recovered ID is emitted once. Full focused run: 47 pass / 0 fail / 525 assertions; tracer check + fmt/diff checks pass. Current critical transfer: gzip 306955/307200 B, Brotli 255864/256000 B. Native source remains unchanged; aarch64 static build is still active.
Author
Owner

Full scripts/verify fast completed with exit 1. Exactly one known native socket-cap assertion failed (9 closes versus 16); every other Rust row passed, including stripped static x86_64 21389296 B and aarch64 19561656 B. No cap changed; no native source changed. Full frontend function is now running separately on pushed HEAD 45e8bd4ea, because Rust failure skips frontend dispatch.

Verbatim final fast output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | FAIL (101)   |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
scripts/verify fast exit=1

verify-fast.log
socket-flake.txt
recovery-order-before.log
storage-controls.log
bundle-before-split.log

Full scripts/verify fast completed with exit 1. Exactly one known native socket-cap assertion failed (9 closes versus 16); every other Rust row passed, including stripped static x86_64 21389296 B and aarch64 19561656 B. No cap changed; no native source changed. Full frontend function is now running separately on pushed HEAD 45e8bd4ea, because Rust failure skips frontend dispatch. Verbatim final fast output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | FAIL (101) | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ scripts/verify fast exit=1 ``` [verify-fast.log](https://git.kayg.org/attachments/f35d6f4d-ca08-4b05-8b9d-2f1316947453) [socket-flake.txt](https://git.kayg.org/attachments/49f0e9de-f091-4b42-a6d0-3b1f7aabde9a) [recovery-order-before.log](https://git.kayg.org/attachments/fd8402be-e74e-4fff-bc3e-c1d89649ca9c) [storage-controls.log](https://git.kayg.org/attachments/4013d8cb-1fbf-4209-864d-0a529c8d69d9) [bundle-before-split.log](https://git.kayg.org/attachments/9fa3b6a2-bf71-45f8-8e7a-f51ebfe4e025)
Author
Owner

Full frontend gate completed on pushed HEAD 45e8bd4eac: 526 tests pass across the five stages, zero failures. Includes all seven review regressions, both hunt tests, real Rust reducer comparison, connection tests, production build and unchanged transfer/font caps. The separate run is required because the known native 9/16 socket assertion makes fast skip frontend dispatch. Fresh merge-base static comparison is queued through build-slot.

Verbatim stage summaries:

 2 pass
 0 fail
 363 pass
 0 fail
 105 pass
 0 fail
 17 pass
 0 fail
JavaScript transfer, critical: identity=994281 gzip=306948/307200 brotli=255886/256000 bytes
JavaScript transfer, deferred: identity=168991 gzip=58498/61440 brotli=51872/55296 bytes
 39 pass
 0 fail
frontend gate exit=0

frontend-gate.log

Full frontend gate completed on pushed HEAD 45e8bd4eac32a5dd1b209cdf7d2a1d67732a7e90: 526 tests pass across the five stages, zero failures. Includes all seven review regressions, both hunt tests, real Rust reducer comparison, connection tests, production build and unchanged transfer/font caps. The separate run is required because the known native 9/16 socket assertion makes fast skip frontend dispatch. Fresh merge-base static comparison is queued through build-slot. Verbatim stage summaries: ```text 2 pass 0 fail 363 pass 0 fail 105 pass 0 fail 17 pass 0 fail JavaScript transfer, critical: identity=994281 gzip=306948/307200 brotli=255886/256000 bytes JavaScript transfer, deferred: identity=168991 gzip=58498/61440 brotli=51872/55296 bytes 39 pass 0 fail frontend gate exit=0 ``` [frontend-gate.log](https://git.kayg.org/attachments/c708fa59-1826-4db0-a681-d9d35ed52d8d)
Author
Owner

Finished round 2 on fix-sync-journal-r2, pushed HEAD 45e8bd4eac32a5dd1b209cdf7d2a1d67732a7e90, base 8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2. Remote verified; checkout clean. Eleven atomic commits; no dev/main push or deployment. Issue stays open.

All seven review regressions and both hunt tests pass. Immutable generations retire sources only after a successful replacement; legacy mutable keys remain until sign-out. Completed births, resolved children, recovery IDs/dependency order, covered receipts, held repaint and account lifetime revocation are covered. Additional controls: 100 offline reloads retain one journal key and the same operation ID; interrupted cleanup and blocked storage preserve the intended boundaries. Focused run: 47 pass / 0 fail / 525 assertions.

Full frontend gate on final HEAD: 526 pass / 0 fail (2 metadata, 363 tracer/canvas, 105 connection, 17 terminal, 39 protocol). Frozen install, TypeScript checks, real Rust reducer comparison, production build and every transfer/font cap pass. Critical gzip 306948/307200 B, Brotli 255886/256000 B; deferred 58498/61440 and 51872/55296 B. No caps changed.

Fresh D243 comparison with the same pinned static recipe: merge base/head x86_64 each 21389296 B, delta 0 B, byte-identical SHA-256 e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0. Head aarch64 is 19561656 B and passes its exact cap. No native/build input, dependency, profile, migration or wire change.

Full scripts/verify fast completed with exit 1 solely for the brief's known native flake: auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply, observed 9 closes / expected 16. No native edits or baseline waiver; not chased per brief. Every other Rust row passed. Its failure skips frontend dispatch, so the entire frontend function was run separately and passed as above. Verbatim final fast output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | FAIL (101)   |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
scripts/verify fast exit=1

Author checklist completed. Tests model storage/transport interleavings in Bun; no real private-mode browser or runtime performance qualification is claimed. Own cache PID 200160 is gone; no job-scratch executable processes remain. Temporary baseline, target, bundle, saved binaries and compiler scratch removed. Evidence remains outside the checkout and is attached below.

How to test on a build of this branch:

  1. Edit while tab A is offline; flush tab B, then reload A: A's edit remains.
  2. Reconnect after a lost receipt: newer remote state remains until the receipt resolves; a resolved child survives restoring another page's placeholder journal.
  3. Sign out in A, then flush B: the account's drawing/retry storage stays cleared.

Seven failures before fixes
Focused controls
Full fast transcript
Exact socket assertion
frontend-gate.log
static-size-comparison.json
baseline-static.log
author-checklist.txt
cleanup.json

Finished round 2 on `fix-sync-journal-r2`, pushed HEAD `45e8bd4eac32a5dd1b209cdf7d2a1d67732a7e90`, base `8bc0cfc6f87c57ee8305627167a439c8ea8c4dd2`. Remote verified; checkout clean. Eleven atomic commits; no dev/main push or deployment. Issue stays open. All seven review regressions and both hunt tests pass. Immutable generations retire sources only after a successful replacement; legacy mutable keys remain until sign-out. Completed births, resolved children, recovery IDs/dependency order, covered receipts, held repaint and account lifetime revocation are covered. Additional controls: 100 offline reloads retain one journal key and the same operation ID; interrupted cleanup and blocked storage preserve the intended boundaries. Focused run: 47 pass / 0 fail / 525 assertions. Full frontend gate on final HEAD: 526 pass / 0 fail (2 metadata, 363 tracer/canvas, 105 connection, 17 terminal, 39 protocol). Frozen install, TypeScript checks, real Rust reducer comparison, production build and every transfer/font cap pass. Critical gzip 306948/307200 B, Brotli 255886/256000 B; deferred 58498/61440 and 51872/55296 B. No caps changed. Fresh D243 comparison with the same pinned static recipe: merge base/head x86_64 each 21389296 B, delta 0 B, byte-identical SHA-256 `e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0`. Head aarch64 is 19561656 B and passes its exact cap. No native/build input, dependency, profile, migration or wire change. Full `scripts/verify fast` completed with exit 1 solely for the brief's known native flake: `auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply`, observed 9 closes / expected 16. No native edits or baseline waiver; not chased per brief. Every other Rust row passed. Its failure skips frontend dispatch, so the entire frontend function was run separately and passed as above. Verbatim final fast output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | FAIL (101) | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ scripts/verify fast exit=1 ``` Author checklist completed. Tests model storage/transport interleavings in Bun; no real private-mode browser or runtime performance qualification is claimed. Own cache PID 200160 is gone; no job-scratch executable processes remain. Temporary baseline, target, bundle, saved binaries and compiler scratch removed. Evidence remains outside the checkout and is attached below. How to test on a build of this branch: 1. Edit while tab A is offline; flush tab B, then reload A: A's edit remains. 2. Reconnect after a lost receipt: newer remote state remains until the receipt resolves; a resolved child survives restoring another page's placeholder journal. 3. Sign out in A, then flush B: the account's drawing/retry storage stays cleared. [Seven failures before fixes](https://git.kayg.org/attachments/bd8bc9ca-4f5e-4a61-acee-5c4077abd2b2) [Focused controls](https://git.kayg.org/attachments/4013d8cb-1fbf-4209-864d-0a529c8d69d9) [Full fast transcript](https://git.kayg.org/attachments/f35d6f4d-ca08-4b05-8b9d-2f1316947453) [Exact socket assertion](https://git.kayg.org/attachments/49f0e9de-f091-4b42-a6d0-3b1f7aabde9a) [frontend-gate.log](https://git.kayg.org/attachments/c708fa59-1826-4db0-a681-d9d35ed52d8d) [static-size-comparison.json](https://git.kayg.org/attachments/fb33293c-776f-495b-8a45-5b7aecb5df5e) [baseline-static.log](https://git.kayg.org/attachments/f85e120e-3ee6-408f-bc0b-d3d1022f7c78) [author-checklist.txt](https://git.kayg.org/attachments/cf984497-b89c-46f0-9112-890fef15f387) [cleanup.json](https://git.kayg.org/attachments/2700edef-dfd7-45ae-8f1f-ef3dfed20c8b)
Author
Owner

Round-2 verification start: branch review-sync-journal-r2, base/head 45e8bd4eac; reviewing 8bc0cfc6f..45e8bd4ea. Read contract and diff before author comments. Retrieved #250 and parent #243 history. Independent concerns to exercise: concurrent lifetime initialization, check/write sign-out interleavings, cleanup interruption, lost receipts with later snapshots, and offline journal growth/write amplification. Tests only; no fixes or deployment.

Round-2 verification start: branch review-sync-journal-r2, base/head 45e8bd4eac32a5dd1b209cdf7d2a1d67732a7e90; reviewing 8bc0cfc6f..45e8bd4ea. Read contract and diff before author comments. Retrieved #250 and parent #243 history. Independent concerns to exercise: concurrent lifetime initialization, check/write sign-out interleavings, cleanup interruption, lost receipts with later snapshots, and offline journal growth/write amplification. Tests only; no fixes or deployment.
Author
Owner

Round-2 findings, tests only (review-sync-journal-r2):

  • P1, storage-lifetime.ts:17–20: two first pages both read missing lifetime; B publishes a nonce, A publishes another. B.valid() becomes false and save silently returns. Test 4812ebc6b expects B's edit and receives Console.
  • P1, server-store.ts:60–63: after valid() reads the nonce, tab A can sign out before B's setItem. B creates one new journal after the sweep completes. Test 35094f0d3 observes 1 journal, expected 0.
  • P1, server-store.ts:44–55,65: generation enumeration succeeds, reading its sole durable edit throws transient SecurityError, shared drawing is older. Replacement omits that source yet retires its key. Test 5b69807ae reloads Console instead of Only durable copy.
  • P2, journal.ts:36–37,81–84: 100 later snapshots leave the same receiptless operation held forever. Test a97648a22 observes one retained hidden edit. The current snapshot protocol has no operation IDs, so this contract needs explicit resolution semantics; no wire change made in review.
    New three-tab control passes when edits affect distinct fields. Concurrent changes to x/y are one cell intent and legitimately conflict, so that exploratory expectation was discarded. QuotaExceededError/SecurityError at each of three adoption writes pass 6/6. A separate removal-recovery test observes 21 generations after 20 failed removals plus storage recovery; retirement forgets failed keys. Commit/check in progress. Initial type check lacked installed node types; frozen install followed by tracer type checks passed. No production changes/deploy.
    lifetime-race.log
    signout-boundary.log
    unreadable-source.log
    lost-receipts.log
Round-2 findings, tests only (review-sync-journal-r2): - P1, storage-lifetime.ts:17–20: two first pages both read missing lifetime; B publishes a nonce, A publishes another. B.valid() becomes false and save silently returns. Test 4812ebc6b expects B's edit and receives Console. - P1, server-store.ts:60–63: after valid() reads the nonce, tab A can sign out before B's setItem. B creates one new journal after the sweep completes. Test 35094f0d3 observes 1 journal, expected 0. - P1, server-store.ts:44–55,65: generation enumeration succeeds, reading its sole durable edit throws transient SecurityError, shared drawing is older. Replacement omits that source yet retires its key. Test 5b69807ae reloads Console instead of Only durable copy. - P2, journal.ts:36–37,81–84: 100 later snapshots leave the same receiptless operation held forever. Test a97648a22 observes one retained hidden edit. The current snapshot protocol has no operation IDs, so this contract needs explicit resolution semantics; no wire change made in review. New three-tab control passes when edits affect distinct fields. Concurrent changes to x/y are one cell intent and legitimately conflict, so that exploratory expectation was discarded. QuotaExceededError/SecurityError at each of three adoption writes pass 6/6. A separate removal-recovery test observes 21 generations after 20 failed removals plus storage recovery; retirement forgets failed keys. Commit/check in progress. Initial type check lacked installed node types; frozen install followed by tracer type checks passed. No production changes/deploy. [lifetime-race.log](https://git.kayg.org/attachments/5ce4c180-fa0a-465b-9a53-af2f91b68bcf) [signout-boundary.log](https://git.kayg.org/attachments/c1dae525-d8d8-4367-9608-205bd2fc7112) [unreadable-source.log](https://git.kayg.org/attachments/0beea340-c7db-4928-8388-641bc509f12a) [lost-receipts.log](https://git.kayg.org/attachments/806fcaf0-46db-4676-bc7e-61be80cedea7)
Author
Owner

Completed/pushed test steps: a8adafd2a adds three-tab publication and six refusal controls plus the failing cleanup-retry regression; b355d4b7f adds eviction-after-every-mutation and 1024-edit offline replay controls. Both tracer type checks pass. Focused final suite: 56 pass, 5 deliberate fail, 562 assertions. The 1024-edit case retains 1024 pending entries, one generation, 287408 UTF-16 journal bytes.

P2 bounded-storage finding: server-store.ts:64–66 / account-storage.ts:39 silently forget failed removals. After twenty failed retirements, a recovered successful flush leaves 21 generations, expected one. A reload can compact them, but the live writer never retries the orphan keys.

P2 inherited latency finding: server-store.ts:130,159–161 / account-storage.ts:98 rewrites the complete pending journal and drawing on the UI thread. On locked infraternal-perf-test, 4 CPUs, Chromium 149.0.7827.55, load 0.04/0.01/0.00 to 0.12/0.03/0.01, 60 windows: pending 0/128/1024/8192/32768 gives save p99 2.2/1.8/2.9/3.7/14.1 ms and flush median 0.8/1.6/5.1/39.1/119.4 ms (7 flush samples each). At 32768, no durable generation fits beside the shared cache. Round-1 baseline also exceeds 16 ms: 8192/32768 flush medians 35.5/104.4 ms. This is inherited, not established as a new regression. Perf-only committed test 800cd898b uses eight actual new edits at 8192 pending, observes seven measured flushes 23.4–38.6 ms and fails <=16 ms. It skips shared-host timing runs. Perf test source was transpiled with external imports for the VM runner; initial untranspiled harness attempts failed before running tests and are excluded.

Real Chromium browsing contexts independently confirm both P1 races using debugger pauses between actual storage calls: concurrent first tabs return Console instead of B edit; sign-out between valid() and setItem leaves one journal. These are not only same-context mock interleavings. WebKit is absent on the perf VM; no Safari private-mode qualification is claimed. All-storage-blocked behavior is covered by SecurityError controls.

Native UUID validation test and final fast are queued behind the host build slots. No production changes or deployment.
focused-final.log
eviction-offline.log
perf-regression-js.log
per-edit-perf-final.log
per-edit-perf-baseline.log
real-browser-races.log

Completed/pushed test steps: a8adafd2a adds three-tab publication and six refusal controls plus the failing cleanup-retry regression; b355d4b7f adds eviction-after-every-mutation and 1024-edit offline replay controls. Both tracer type checks pass. Focused final suite: 56 pass, 5 deliberate fail, 562 assertions. The 1024-edit case retains 1024 pending entries, one generation, 287408 UTF-16 journal bytes. P2 bounded-storage finding: server-store.ts:64–66 / account-storage.ts:39 silently forget failed removals. After twenty failed retirements, a recovered successful flush leaves 21 generations, expected one. A reload can compact them, but the live writer never retries the orphan keys. P2 inherited latency finding: server-store.ts:130,159–161 / account-storage.ts:98 rewrites the complete pending journal and drawing on the UI thread. On locked infraternal-perf-test, 4 CPUs, Chromium 149.0.7827.55, load 0.04/0.01/0.00 to 0.12/0.03/0.01, 60 windows: pending 0/128/1024/8192/32768 gives save p99 2.2/1.8/2.9/3.7/14.1 ms and flush median 0.8/1.6/5.1/39.1/119.4 ms (7 flush samples each). At 32768, no durable generation fits beside the shared cache. Round-1 baseline also exceeds 16 ms: 8192/32768 flush medians 35.5/104.4 ms. This is inherited, not established as a new regression. Perf-only committed test 800cd898b uses eight actual new edits at 8192 pending, observes seven measured flushes 23.4–38.6 ms and fails <=16 ms. It skips shared-host timing runs. Perf test source was transpiled with external imports for the VM runner; initial untranspiled harness attempts failed before running tests and are excluded. Real Chromium browsing contexts independently confirm both P1 races using debugger pauses between actual storage calls: concurrent first tabs return Console instead of B edit; sign-out between valid() and setItem leaves one journal. These are not only same-context mock interleavings. WebKit is absent on the perf VM; no Safari private-mode qualification is claimed. All-storage-blocked behavior is covered by SecurityError controls. Native UUID validation test and final fast are queued behind the host build slots. No production changes or deployment. [focused-final.log](https://git.kayg.org/attachments/4f69bf1d-d2f3-4865-aaf2-48e8adfd58a7) [eviction-offline.log](https://git.kayg.org/attachments/8ea5fa16-4aab-44a5-96aa-d0106a349883) [perf-regression-js.log](https://git.kayg.org/attachments/aa864422-c50e-46d5-b9ea-56dccd1659d1) [per-edit-perf-final.log](https://git.kayg.org/attachments/538b5c6e-0cdb-4da6-b380-f1f2a410d0c1) [per-edit-perf-baseline.log](https://git.kayg.org/attachments/f68a4be9-64bd-4ca8-96ba-c9302bc505b4) [real-browser-races.log](https://git.kayg.org/attachments/cadc4310-1e4e-4342-8f49-fca2ba68af10)
Author
Owner

Additional deterministic sequence for the existing P1 unsafe-retirement finding: two valid immutable sources each contain33 columns/unsent opens; their66-column union exceeds the decoder's64-column limit. cache.ts:94–95 falls back to the first source, but server-store.ts:55,63–64 still retires both sources. A fresh durable generation contains only33 of66 unsent IDs. This requires no storage failure. Test server-store.test.ts:793–813 reproduces33 missing IDs; tracer type check/atomic commit in progress. No demand to draw an oversized document: the assertion only requires omitted unsent entries to remain durable until explicit server resolution.
Real three-concurrent-adopter browser control passed: A last, x7, third view present, one compacted generation. Native gate still queued; no fixes/deploy.
merge-fallback.log
real-three-tabs.log
review-checklist.txt

Additional deterministic sequence for the existing P1 unsafe-retirement finding: two valid immutable sources each contain33 columns/unsent opens; their66-column union exceeds the decoder's64-column limit. cache.ts:94–95 falls back to the first source, but server-store.ts:55,63–64 still retires both sources. A fresh durable generation contains only33 of66 unsent IDs. This requires no storage failure. Test server-store.test.ts:793–813 reproduces33 missing IDs; tracer type check/atomic commit in progress. No demand to draw an oversized document: the assertion only requires omitted unsent entries to remain durable until explicit server resolution. Real three-concurrent-adopter browser control passed: A last, x7, third view present, one compacted generation. Native gate still queued; no fixes/deploy. [merge-fallback.log](https://git.kayg.org/attachments/15280986-b079-4337-bfdb-bb9bd0f1fd24) [real-three-tabs.log](https://git.kayg.org/attachments/a0089c80-ec5a-44d7-9d80-9a7f1315cfd3) [review-checklist.txt](https://git.kayg.org/attachments/726d23ba-b5da-4ced-9fb8-99fceeb29094)
Author
Owner

Verdict: HOLD — 3 P1, 3 P2. No fixes or deployment. Reviewed production delta8bc0cfc6f..45e8bd4ea; test branch review-sync-journal-r2 currently pushed at a2bab6216d. Final native gate/size receipts are still pending host build capacity; this is the finding record, not the finish notice.

  1. P1 — concurrent first tabs silently discard a tab's saves. apps/tracer/src/canvas/model/storage-lifetime.ts:15–18,24, server-store.ts:87: A and B both read a missing marker; B publishes its nonce, then A publishes another. B becomes invalid without sign-out and its save returns before capture. Test4812ebc6b observes Console instead of B's edit. Independent real Chromium pages reproduce the same sequence with a debugger pause between storage calls.
  2. P1 — a checked write recreates the account journal after sign-out. server-store.ts:58–61: B reads the valid lifetime; A removes the lifetime and finishes the complete sign-out sweep; B publishes its generation. One private journal survives. Test35094f0d3 and real independent Chromium pages both observe1 key, expected0. Storage events arrive too late to make the check/write pair atomic.
  3. P1 — retirement deletes sources that the replacement does not contain. server-store.ts:44–55,61–64, cache.ts:94–95. Two reproduced sequences: (a) reading the sole durable source throws SecurityError; the shared cache is older; successful replacement omits and deletes the source (5b69807ae). (b) two valid sources each contain33 columns; their66-column union exceeds the64-column projection cap, so merge falls back to the first source but adoption deletes both (a2bab6216).33 unsent open identities disappear before any server resolution. This test requires preserving the retry entries, not drawing an oversized layout;31 of those33 could still fit before server refusal of the final2.
  4. P2 — later snapshots never resolve a receiptless held edit. journal.ts:35–36,83–86: send an edit, lose its receipt, reconnect, then accept100 newer snapshots (including its applied state and a newer remote edit). The same entry remains held forever. Testa97648a22. The existing wire snapshot lacks operation identities; no resolution semantics or wire fix is chosen in review.
  5. P2 — failed cleanup is forgotten, leaving generations unbounded until another reload. server-store.ts:62–64, account-storage.ts:39:20 retirements fail, storage recovers, then a successful flush leaves21 generations. The live page does not retry orphan removal. Testa8adafd2a.
  6. P2 — inherited full-journal flushes exceed the16ms frame budget. server-store.ts:133,163–164, account-storage.ts:98: on locked4-vCPU perf VM, real Chromium149,60 windows and8192 pending edits, seven new-edit flushes take23.4–38.6ms; perf-only test800cd898b fails <=16ms. Separate31-save/7-flush scale series at8192/32768 entries gives save p99 3.7/14.1ms and flush median39.1/119.4ms. Round-1 baseline flush medians35.5/104.4ms also fail; this is inherited, not established as a new regression. Test runs only with INFRATERNAL_PERF_VM=1; shared-host timings are not evidence.

Positive controls: all7 round-1 regressions pass; three truly concurrent adopters recover A's later name, B's cell and C's added view, then compact to1 generation;6/6 quota/security failures at adoption writes retain the durable source; every adoption mutation interruption preserves the edit;1024 offline edits replay after eviction (1024 pending entries,287408 UTF-16 journal bytes). Focused suite before the final fallback case:56 pass/5 deliberate fail; final expected intentional count is6 Bun failures plus1 perf-browser failure. Real SQLite version-0/version-4 receipt validation test is added and awaiting its gate before commit. No actual Safari private-mode qualification: WebKit is absent on the named perf VM; blocked-storage semantics are modeled with SecurityError.

Final fast output and fresh stripped-static size comparison will follow after the build-slot queue. Named socket-close flake will be recorded without investigation. Issue remains open.
lifetime-race.log
signout-boundary.log
unreadable-source.log
lost-receipts.log
focused-final.log
eviction-offline.log
perf-regression-js.log
per-edit-perf-final.log
per-edit-perf-baseline.log
merge-fallback.log
real-three-tabs.log
review-checklist.txt
browser-harnesses.json

**Verdict: HOLD — 3 P1, 3 P2. No fixes or deployment.** Reviewed production delta8bc0cfc6f..45e8bd4ea; test branch review-sync-journal-r2 currently pushed at a2bab6216d6b46262eec6a630918e8b1326c0866. Final native gate/size receipts are still pending host build capacity; this is the finding record, not the finish notice. 1. **P1 — concurrent first tabs silently discard a tab's saves.** `apps/tracer/src/canvas/model/storage-lifetime.ts:15–18,24`, `server-store.ts:87`: A and B both read a missing marker; B publishes its nonce, then A publishes another. B becomes invalid without sign-out and its save returns before capture. Test4812ebc6b observes Console instead of B's edit. Independent real Chromium pages reproduce the same sequence with a debugger pause between storage calls. 2. **P1 — a checked write recreates the account journal after sign-out.** `server-store.ts:58–61`: B reads the valid lifetime; A removes the lifetime and finishes the complete sign-out sweep; B publishes its generation. One private journal survives. Test35094f0d3 and real independent Chromium pages both observe1 key, expected0. Storage events arrive too late to make the check/write pair atomic. 3. **P1 — retirement deletes sources that the replacement does not contain.** `server-store.ts:44–55,61–64`, `cache.ts:94–95`. Two reproduced sequences: (a) reading the sole durable source throws SecurityError; the shared cache is older; successful replacement omits and deletes the source (5b69807ae). (b) two valid sources each contain33 columns; their66-column union exceeds the64-column projection cap, so merge falls back to the first source but adoption deletes both (a2bab6216).33 unsent open identities disappear before any server resolution. This test requires preserving the retry entries, not drawing an oversized layout;31 of those33 could still fit before server refusal of the final2. 4. **P2 — later snapshots never resolve a receiptless held edit.** `journal.ts:35–36,83–86`: send an edit, lose its receipt, reconnect, then accept100 newer snapshots (including its applied state and a newer remote edit). The same entry remains held forever. Testa97648a22. The existing wire snapshot lacks operation identities; no resolution semantics or wire fix is chosen in review. 5. **P2 — failed cleanup is forgotten, leaving generations unbounded until another reload.** `server-store.ts:62–64`, `account-storage.ts:39`:20 retirements fail, storage recovers, then a successful flush leaves21 generations. The live page does not retry orphan removal. Testa8adafd2a. 6. **P2 — inherited full-journal flushes exceed the16ms frame budget.** `server-store.ts:133,163–164`, `account-storage.ts:98`: on locked4-vCPU perf VM, real Chromium149,60 windows and8192 pending edits, seven new-edit flushes take23.4–38.6ms; perf-only test800cd898b fails <=16ms. Separate31-save/7-flush scale series at8192/32768 entries gives save p99 3.7/14.1ms and flush median39.1/119.4ms. Round-1 baseline flush medians35.5/104.4ms also fail; this is inherited, not established as a new regression. Test runs only with INFRATERNAL_PERF_VM=1; shared-host timings are not evidence. Positive controls: all7 round-1 regressions pass; three truly concurrent adopters recover A's later name, B's cell and C's added view, then compact to1 generation;6/6 quota/security failures at adoption writes retain the durable source; every adoption mutation interruption preserves the edit;1024 offline edits replay after eviction (1024 pending entries,287408 UTF-16 journal bytes). Focused suite before the final fallback case:56 pass/5 deliberate fail; final expected intentional count is6 Bun failures plus1 perf-browser failure. Real SQLite version-0/version-4 receipt validation test is added and awaiting its gate before commit. No actual Safari private-mode qualification: WebKit is absent on the named perf VM; blocked-storage semantics are modeled with SecurityError. Final fast output and fresh stripped-static size comparison will follow after the build-slot queue. Named socket-close flake will be recorded without investigation. Issue remains open. [lifetime-race.log](https://git.kayg.org/attachments/5ce4c180-fa0a-465b-9a53-af2f91b68bcf) [signout-boundary.log](https://git.kayg.org/attachments/c1dae525-d8d8-4367-9608-205bd2fc7112) [unreadable-source.log](https://git.kayg.org/attachments/0beea340-c7db-4928-8388-641bc509f12a) [lost-receipts.log](https://git.kayg.org/attachments/806fcaf0-46db-4676-bc7e-61be80cedea7) [focused-final.log](https://git.kayg.org/attachments/4f69bf1d-d2f3-4865-aaf2-48e8adfd58a7) [eviction-offline.log](https://git.kayg.org/attachments/8ea5fa16-4aab-44a5-96aa-d0106a349883) [perf-regression-js.log](https://git.kayg.org/attachments/aa864422-c50e-46d5-b9ea-56dccd1659d1) [per-edit-perf-final.log](https://git.kayg.org/attachments/538b5c6e-0cdb-4da6-b380-f1f2a410d0c1) [per-edit-perf-baseline.log](https://git.kayg.org/attachments/f68a4be9-64bd-4ca8-96ba-c9302bc505b4) [merge-fallback.log](https://git.kayg.org/attachments/15280986-b079-4337-bfdb-bb9bd0f1fd24) [real-three-tabs.log](https://git.kayg.org/attachments/a0089c80-ec5a-44d7-9d80-9a7f1315cfd3) [review-checklist.txt](https://git.kayg.org/attachments/726d23ba-b5da-4ced-9fb8-99fceeb29094) [browser-harnesses.json](https://git.kayg.org/attachments/f2416a62-6523-411f-80d9-daa331680366)
Author
Owner

Additional P1: startup storage failure permanently bypasses peer sign-out. storage-lifetime.ts:20,24,26–27: initial lifetime setItem throws, setting nonce undefined; storage later recovers and the page writes journals successfully. Another context signs out and removes all existing account keys, but there is no lifetime marker to remove, so no matching storage event can ever arrive. Even after every generated storage event is delivered, the old tab's valid() stays true and a subsequent save recreates one journal plus the drawing. This is independent of the check/write race: there is no concurrent write or delayed event in this reproduction. The new server-store.test.ts case fails expected0/actual1 journal; type check and atomic commit are in progress. Current finding count becomes4 P1 +3 P2 (8 intentional regressions, including both source-omission sequences and the perf-only budget case). Native validation is compiling; no fixes/deploy.
missing-marker-signout.log

Additional P1: startup storage failure permanently bypasses peer sign-out. `storage-lifetime.ts:20,24,26–27`: initial lifetime setItem throws, setting nonce undefined; storage later recovers and the page writes journals successfully. Another context signs out and removes all existing account keys, but there is no lifetime marker to remove, so no matching storage event can ever arrive. Even after every generated storage event is delivered, the old tab's valid() stays true and a subsequent save recreates one journal plus the drawing. This is independent of the check/write race: there is no concurrent write or delayed event in this reproduction. The new server-store.test.ts case fails expected0/actual1 journal; type check and atomic commit are in progress. Current finding count becomes4 P1 +3 P2 (8 intentional regressions, including both source-omission sequences and the perf-only budget case). Native validation is compiling; no fixes/deploy. [missing-marker-signout.log](https://git.kayg.org/attachments/5a4305d8-8630-4f47-bbf3-fcd61848e647)
Author
Owner

Completed/pushed native recovered-ID validation test at b2ca1df465. Real SQLite store accepts version-4 and version-0 IDs with independent permanent receipts; identical retries retain revisions and changed inputs are refused. Fmt, touched-server all-target clippy, and the single native test pass. Branch review-sync-journal-r2; final full fast starts now. No production changes or deployment.

Completed/pushed native recovered-ID validation test at b2ca1df465f1a74249043bcb574a3224fff67689. Real SQLite store accepts version-4 and version-0 IDs with independent permanent receipts; identical retries retain revisions and changed inputs are refused. Fmt, touched-server all-target clippy, and the single native test pass. Branch review-sync-journal-r2; final full fast starts now. No production changes or deployment.
Author
Owner

Additional inherited P1 contract gap: a completed offline save is lost on an abrupt stop before the coalesced writes. server-store.ts:87–89,133, account-storage.ts:98–99: capture changes memory and save resolves, but both persistent copies still wait for the300ms callbacks. Cancel the page's scheduled work without invoking disposal, then construct a fresh page solely from stored state: expected Captured before stop, restored Console. New server-store.test.ts:847–862 reproduces this with virtual callbacks, no wall-clock assertion. Normal visibility/pagehide transitions ARE explicitly flushed (canvas/create.ts:187–189); this finding is specifically the brief's abrupt-stop boundary, not graceful tab backgrounding. The current unqualified no-edit-loss contract does not carve out completed saves in that window. No production fix chosen.

Current verdict: HOLD —5 P1,3 P2;9 intentional regressions (8 unit,1 perf-only). Type check/atomic push of the latest test are in progress. Full fast began on b2ca1df46; its checked Rust inputs have not changed, and this TypeScript-only test was added before the frontend phase. All Rust cases reported so far pass, including the named socket-storm flake and vt_credit. Raw final gate and static comparison remain pending. No deployment.
stop-before-flush.log

Additional inherited P1 contract gap: a completed offline save is lost on an abrupt stop before the coalesced writes. `server-store.ts:87–89,133`, `account-storage.ts:98–99`: capture changes memory and save resolves, but both persistent copies still wait for the300ms callbacks. Cancel the page's scheduled work without invoking disposal, then construct a fresh page solely from stored state: expected Captured before stop, restored Console. New server-store.test.ts:847–862 reproduces this with virtual callbacks, no wall-clock assertion. Normal visibility/pagehide transitions ARE explicitly flushed (`canvas/create.ts:187–189`); this finding is specifically the brief's abrupt-stop boundary, not graceful tab backgrounding. The current unqualified no-edit-loss contract does not carve out completed saves in that window. No production fix chosen. Current verdict: HOLD —5 P1,3 P2;9 intentional regressions (8 unit,1 perf-only). Type check/atomic push of the latest test are in progress. Full fast began on b2ca1df46; its checked Rust inputs have not changed, and this TypeScript-only test was added before the frontend phase. All Rust cases reported so far pass, including the named socket-storm flake and vt_credit. Raw final gate and static comparison remain pending. No deployment. [stop-before-flush.log](https://git.kayg.org/attachments/84426927-05a4-4c3e-a9bd-cb9b415d6afb)
Author
Owner

Native milestone on review-sync-journal-r2, pushed HEAD ab50302bb9: all Rust test batches passed; vt_credit and the named full-place socket-storm case both passed. Fmt, VT fmt, CLI compile-out, workspace clippy, SSH helper, inode fixture and cargo-deny passed. Static builds are now running, then frontend. Final TS-only abrupt-stop regression was added before frontend began; no previously checked Rust input changed. No fixes or deployment.

Completed test-batch footers, verbatim:

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s
test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 45.84s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s
test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.62s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.96s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.39s
test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.11s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.85s
test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s
test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.14s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.06s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.03s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.23s
test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.08s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.94s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.61s
test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 36.60s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.80s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s
test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 23.15s
test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s
test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.62s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s
test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.54s
test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.07s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s
test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.69s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.85s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.68s
test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.21s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s
test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 15.24s
test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.37s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s
test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.84s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 55.70s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.21s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.37s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.61s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 623 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 522.21s
test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.87s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 6.99s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 100 filtered out; finished in 0.01s
test result: ok. 88 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 64.82s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.35s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 4.08s
Native milestone on review-sync-journal-r2, pushed HEAD ab50302bb9ab523bc66984f5af5a60c3302c38fb: all Rust test batches passed; vt_credit and the named full-place socket-storm case both passed. Fmt, VT fmt, CLI compile-out, workspace clippy, SSH helper, inode fixture and cargo-deny passed. Static builds are now running, then frontend. Final TS-only abrupt-stop regression was added before frontend began; no previously checked Rust input changed. No fixes or deployment. Completed test-batch footers, verbatim: ```text test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 45.84s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 75 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.62s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.96s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.39s test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.11s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.85s test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.14s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.06s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.03s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.23s test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.08s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.94s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.61s test result: ok. 148 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 36.60s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.80s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 23.15s test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.62s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.54s test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.07s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.69s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.85s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.68s test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.21s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 15.24s test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.37s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.71s test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.31s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.84s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 55.70s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.21s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.37s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.61s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 623 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 522.21s test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.87s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 6.99s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 100 filtered out; finished in 0.01s test result: ok. 88 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 64.82s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.35s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 4.08s ```
Author
Owner

Completed/pushed e157f9b01 on review-sync-journal-r2: the abrupt-stop durability regression now observes stored state after save resolves, without replacing persistence timers. It still fails (expected Captured before stop, restored Console;2 assertions), while allowing a future save implementation to await asynchronous local persistence. Tracer type check and diff check pass. No production change. Full fast has passed every Rust test and is building both static targets; frontend has not begun and will include this final fixture. Current head e157f9b01,12 atomic review commits, no fixes/deploy.

Completed/pushed e157f9b01 on review-sync-journal-r2: the abrupt-stop durability regression now observes stored state after save resolves, without replacing persistence timers. It still fails (expected Captured before stop, restored Console;2 assertions), while allowing a future save implementation to await asynchronous local persistence. Tracer type check and diff check pass. No production change. Full fast has passed every Rust test and is building both static targets; frontend has not begun and will include this final fixture. Current head e157f9b01,12 atomic review commits, no fixes/deploy.
Author
Owner

Full scripts/verify fast completed with exit1 on the final review tree (HEAD e157f9b01). Every Rust row PASS; named socket-storm case and vt_credit both PASS, no waiver. Frontend has372 pass/8 deliberate review failures, no other failures. Native inputs stayed unchanged while final TypeScript regressions were added before frontend began. Both exact static caps pass:21389296 B x86_64 and19561656 B aarch64. The intentional failures stop frontend dispatch before connection/terminal/build/transfer/protocol stages; those stages are being verified separately, followed by fresh same-recipe baseline size comparison. No fixes/deploy; not the finish notice yet.

Verbatim full fast summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 372 pass
 8 fail
 21992 expect() calls
Ran 380 tests across 60 files. [33.15s]
scripts/verify fast exit=1

verify-fast.log
verify-fast-summary.txt

Full scripts/verify fast completed with exit1 on the final review tree (HEAD e157f9b01). Every Rust row PASS; named socket-storm case and vt_credit both PASS, no waiver. Frontend has372 pass/8 deliberate review failures, no other failures. Native inputs stayed unchanged while final TypeScript regressions were added before frontend began. Both exact static caps pass:21389296 B x86_64 and19561656 B aarch64. The intentional failures stop frontend dispatch before connection/terminal/build/transfer/protocol stages; those stages are being verified separately, followed by fresh same-recipe baseline size comparison. No fixes/deploy; not the finish notice yet. Verbatim full fast summary: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 372 pass 8 fail 21992 expect() calls Ran 380 tests across 60 files. [33.15s] scripts/verify fast exit=1 ``` [verify-fast.log](https://git.kayg.org/attachments/03ac36c0-72ff-4c3f-b12f-37ec908bd375) [verify-fast-summary.txt](https://git.kayg.org/attachments/d69fe02a-da53-4785-b128-844691555ccb)
Author
Owner

Starting #250 P3 sync follow-up on branch sync-p3s, base abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e (origin/release-prod-live). Read the #250 sync hunt findings 3–5 and prior issue state. I’ll add failing Bun regressions first with simulated 200 ms RTT, then address drop recovery messaging, single-snapshot resubscription, and immediate gap recovery. Journal persistence edits remain on fix-sync-journal-r2 and are out of scope. No deploy.

Starting #250 P3 sync follow-up on branch `sync-p3s`, base `abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e` (`origin/release-prod-live`). Read the #250 sync hunt findings 3–5 and prior issue state. I’ll add failing Bun regressions first with simulated 200 ms RTT, then address drop recovery messaging, single-snapshot resubscription, and immediate gap recovery. Journal persistence edits remain on `fix-sync-journal-r2` and are out of scope. No deploy.
Author
Owner

P3 sync regressions reproduced before implementation on abedd62b0. INFRATERAL_TEST_RTT=200 bun test src/canvas/model/server-store.test.ts reports 23 pass / 3 fail / 168 assertions: reconnect resubscribes at 500 ms before the modeled 600 ms snapshot; a revision gap sends no immediate resubscribe; and a dropped call invokes the notice callback immediately. Tests are in apps/tracer/src/canvas/model/server-store.test.ts:420–507. Failing output

P3 sync regressions reproduced before implementation on `abedd62b0`. `INFRATERAL_TEST_RTT=200 bun test src/canvas/model/server-store.test.ts` reports 23 pass / 3 fail / 168 assertions: reconnect resubscribes at 500 ms before the modeled 600 ms snapshot; a revision gap sends no immediate resubscribe; and a dropped call invokes the notice callback immediately. Tests are in `apps/tracer/src/canvas/model/server-store.test.ts:420–507`. [Failing output](https://git.kayg.org/attachments/4657e24a-a7d9-4565-95f2-5dcb60c4b180)
Author
Owner

Finding: the #250 task specifies a fresh-link notice budget of three measured RTTs + 50 ms, while DECISIONS.md §267 (line 2654) amends D265 to four RTTs + 50 ms. I am following the explicit #250 task budget and have not changed decision text. Recording this discrepancy for review.

Finding: the #250 task specifies a fresh-link notice budget of three measured RTTs + 50 ms, while DECISIONS.md §267 (line 2654) amends D265 to four RTTs + 50 ms. I am following the explicit #250 task budget and have not changed decision text. Recording this discrepancy for review.
Author
Owner

Step complete: 902957058 adds retained measured RTT and the current resume/fresh recovery class to MuxConnection. Focused connection tests: 16 pass, 0 fail, 68 assertions. bun run check: exit 0.

Step complete: 902957058 adds retained measured RTT and the current resume/fresh recovery class to MuxConnection. Focused connection tests: 16 pass, 0 fail, 68 assertions. `bun run check`: exit 0.
Author
Owner

Step complete: e99bc6c94 updates the server canvas recovery state machine. The 200 ms RTT focused suite reports 26 pass, 0 fail, 176 assertions. It covers a 600 ms outstanding snapshot with no duplicate Subscribe, immediate gap resync, and quiet resumed recovery through 250 ms versus notice at 650 ms for a fresh link. bun run check: exit 0.

Step complete: e99bc6c94 updates the server canvas recovery state machine. The 200 ms RTT focused suite reports 26 pass, 0 fail, 176 assertions. It covers a 600 ms outstanding snapshot with no duplicate Subscribe, immediate gap resync, and quiet resumed recovery through 250 ms versus notice at 650 ms for a fresh link. `bun run check`: exit 0.
Author
Owner

Step complete: 3b94b1f28 maps delayed layout recovery to the shared neutral clock toast and preserves error tone for definitive refusals. The tracer TypeScript check passed before commit. Production browser screenshots are queued in build slot 4 at port 4253.

Step complete: 3b94b1f28 maps delayed layout recovery to the shared neutral clock toast and preserves error tone for definitive refusals. The tracer TypeScript check passed before commit. Production browser screenshots are queued in build slot 4 at port 4253.
Author
Owner

Correction to step 3 note: the wrapper uses BUILD_SLOTS and defaults to three slots; my wording “build slot 4” was inaccurate. The screenshot job remains queued; the local health check on 4253 returned 000, and no preview server has started yet.

Correction to step 3 note: the wrapper uses BUILD_SLOTS and defaults to three slots; my wording “build slot 4” was inaccurate. The screenshot job remains queued; the local health check on 4253 returned 000, and no preview server has started yet.
Author
Owner

Progress: the production screenshot run remains queued behind the four active build slots. The local health endpoint on port 4253 is not listening yet, so no browser evidence was produced. The queued job will continue when a slot is released; no owner action is needed.

Progress: the production screenshot run remains queued behind the four active build slots. The local health endpoint on port 4253 is not listening yet, so no browser evidence was produced. The queued job will continue when a slot is released; no owner action is needed.
Author
Owner

Finding: the first production screenshot run hit Playwright's default 30 s test timeout while starting the fifth viewport context; the error context is in evidence/playwright/p3s-toast-visual-capture-t-1e5d7-e-shared-production-surface/error-context.md. Four screenshots were captured before the timeout. No UI assertion failed. I raised the temporary capture test timeout to 120 s and am rerunning it.

Finding: the first production screenshot run hit Playwright's default 30 s test timeout while starting the fifth viewport context; the error context is in `evidence/playwright/p3s-toast-visual-capture-t-1e5d7-e-shared-production-surface/error-context.md`. Four screenshots were captured before the timeout. No UI assertion failed. I raised the temporary capture test timeout to 120 s and am rerunning it.
Author
Owner

Production UI review evidence: the screenshot-only Playwright capture passed (1 test, 0 failures, six viewport/theme states; 39.9 s) against the production tracer bundle at TRACER_TEST_PORT=4253. Attached states:

1440x900 ink
1440x900 paper
393x852 ink
393x852 paper
375x667 ink
375x667 paper

Production UI review evidence: the screenshot-only Playwright capture passed (1 test, 0 failures, six viewport/theme states; 39.9 s) against the production tracer bundle at TRACER_TEST_PORT=4253. Attached states: ![1440x900 ink](https://git.kayg.org/attachments/85e78ad9-6f46-476a-ba64-44fab0b12a26) ![1440x900 paper](https://git.kayg.org/attachments/042dedbd-5b8b-4129-b26d-743e79c7cd60) ![393x852 ink](https://git.kayg.org/attachments/030aa230-3b8c-4b0e-aeb1-e316606e050c) ![393x852 paper](https://git.kayg.org/attachments/851f4f1e-7a03-4b0e-a5e6-212ee14f3857) ![375x667 ink](https://git.kayg.org/attachments/13a52bb4-c56c-4742-a4f5-1c22801f381f) ![375x667 paper](https://git.kayg.org/attachments/adaba8db-57cd-48eb-9f2d-e929a965c378)
Author
Owner

Gate status: scripts/verify iterate is queued through build-slot at pushed HEAD 3b94b1f28. Its log is still 0 bytes; the gate has not started and has no failure output. Waiting for a shared slot to be released.

Gate status: `scripts/verify iterate` is queued through build-slot at pushed HEAD 3b94b1f28. Its log is still 0 bytes; the gate has not started and has no failure output. Waiting for a shared slot to be released.
Author
Owner

Finding from scripts/verify iterate: Rust gate test failed at crates/infraternal-agent/src/daemon_gone_tests.rs:119 with InvalidInput: path must be shorter than SUN_LEN. The run used TMPDIR=/home/kayg/.cache/codex-scratch/sync-p3s/tmp; no Rust files are changed. I will rerun the focused test with a shorter scratch alias, then rerun iterate.

Finding from `scripts/verify iterate`: Rust gate test failed at `crates/infraternal-agent/src/daemon_gone_tests.rs:119` with `InvalidInput: path must be shorter than SUN_LEN`. The run used `TMPDIR=/home/kayg/.cache/codex-scratch/sync-p3s/tmp`; no Rust files are changed. I will rerun the focused test with a shorter scratch alias, then rerun iterate.
Author
Owner

The vanished-session socket test passed with the short scratch TMPDIR: 1 passed, 0 failed, 75 filtered. The earlier SUN_LEN failure was caused by the longer job TMPDIR; iterate is rerunning with the short alias.

The vanished-session socket test passed with the short scratch TMPDIR: 1 passed, 0 failed, 75 filtered. The earlier SUN_LEN failure was caused by the longer job TMPDIR; iterate is rerunning with the short alias.
Author
Owner

Starting sync-journal-r3 at e157f9b01a (origin/review-sync-journal-r2). Retrieved #250 and parent #243 history, read round-2 verdict and hunt. Baseline focused tests: 52 pass / 8 fail / 547 assertions. Includes the two added P1 cases (failed initial marker and completed save before flush). Implementing the approved per-account Web Lock, conservative shared-key fallback, entry-level durable writes, and bounded receiptless recovery. No deploy or wire/dependency change planned. D106 sets iOS/Safari 17. D259 recovery allowance interpreted as 50 ms after the reconnect snapshot returns (the round-trip leg has completed).

Starting sync-journal-r3 at e157f9b01ad8c65bb0cca7ac9852cd75c4b72c7e (origin/review-sync-journal-r2). Retrieved #250 and parent #243 history, read round-2 verdict and hunt. Baseline focused tests: 52 pass / 8 fail / 547 assertions. Includes the two added P1 cases (failed initial marker and completed save before flush). Implementing the approved per-account Web Lock, conservative shared-key fallback, entry-level durable writes, and bounded receiptless recovery. No deploy or wire/dependency change planned. D106 sets iOS/Safari 17. D259 recovery allowance interpreted as 50 ms after the reconnect snapshot returns (the round-trip leg has completed).
Author
Owner

Pushed 9fa090cdf bounded held-edit recovery, 295a6bead account lock/sign-out boundary, 0db0decaf fixture correction. Recovery slice: 8 pass / 28 assertions. Account/lock slice after correction: 7 pass / 26 assertions; preceding commit mistakenly described the 6-pass/1-fail fixture run as passing (raw log retained); corrected immediately without rewriting history. Tracer check and fmt pass. WebKit release notes confirm Web Locks shipped in Safari 15.4: https://webkit.org/blog/12445/new-webkit-features-in-safari-15-4/ ; D106 floor is Safari 17. Current uncommitted serialized store passes all 61 focused journal/cache/store/hunt tests (556 assertions), including all eight intentional baseline failures. Full-state per-save writes are deliberately the next optimization step; no latency claim yet. Source retirement now requires replacement coverage, including explicit settled operation identities, and failures remain retryable.

Pushed 9fa090cdf bounded held-edit recovery, 295a6bead account lock/sign-out boundary, 0db0decaf fixture correction. Recovery slice: 8 pass / 28 assertions. Account/lock slice after correction: 7 pass / 26 assertions; preceding commit mistakenly described the 6-pass/1-fail fixture run as passing (raw log retained); corrected immediately without rewriting history. Tracer check and fmt pass. WebKit release notes confirm Web Locks shipped in Safari 15.4: https://webkit.org/blog/12445/new-webkit-features-in-safari-15-4/ ; D106 floor is Safari 17. Current uncommitted serialized store passes all 61 focused journal/cache/store/hunt tests (556 assertions), including all eight intentional baseline failures. Full-state per-save writes are deliberately the next optimization step; no latency claim yet. Source retirement now requires replacement coverage, including explicit settled operation identities, and failures remain retryable.
Author
Owner

Pushed fd84440c0 locked store; 54cfefe01 journal change tracking/projection; a9bb38e0c immutable append storage; 1a83e9e46 production integration and durable sent markers. Current focused controls: 65 pass / 612 assertions (additional D259 deterministic expiry test included, not yet committed). Perf VM qualification: 4 vCPU, Chromium, 60 windows, 8192 pending entries, 7 measured new edits; completed saves 2.5–3.3 ms, awaited flushes 0.6–1.1 ms, 2,362,938 stored UTF-16 bytes. Load 0.04/0.01/0.00 before and after. Both save and flush <=16 ms. Native Web Locks enabled. Baseline review measured 23.4–38.6 ms flushes. perf-journal.log
Production build is waiting for a host build slot. Independent-tab functional tests and final fast/static comparison follow. No deploy.

Pushed fd84440c0 locked store; 54cfefe01 journal change tracking/projection; a9bb38e0c immutable append storage; 1a83e9e46 production integration and durable sent markers. Current focused controls: 65 pass / 612 assertions (additional D259 deterministic expiry test included, not yet committed). Perf VM qualification: 4 vCPU, Chromium, 60 windows, 8192 pending entries, 7 measured new edits; completed saves 2.5–3.3 ms, awaited flushes 0.6–1.1 ms, 2,362,938 stored UTF-16 bytes. Load 0.04/0.01/0.00 before and after. Both save and flush <=16 ms. Native Web Locks enabled. Baseline review measured 23.4–38.6 ms flushes. [perf-journal.log](https://git.kayg.org/attachments/0a66afac-159e-43a5-8ce8-2cdb3b0d35df) Production build is waiting for a host build slot. Independent-tab functional tests and final fast/static comparison follow. No deploy.
Author
Owner

The short-TMPDIR iterate rerun reached the workspace suite: 620 passed, 2 failed, 52 ignored. Failures were auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply (15/16 closed) and bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout. The socket-cap test passed alone (1 passed in 2.20s). The first retirement rerun selected zero tests because the remote feature was missing; a matching-feature rerun is queued. Evidence: iterate log, socket-cap focused log.

The short-TMPDIR iterate rerun reached the workspace suite: 620 passed, 2 failed, 52 ignored. Failures were `auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply` (15/16 closed) and `bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout`. The socket-cap test passed alone (1 passed in 2.20s). The first retirement rerun selected zero tests because the `remote` feature was missing; a matching-feature rerun is queued. Evidence: [iterate log](https://git.kayg.org/attachments/1c0961e3-5886-4310-935e-4d581cb88682), [socket-cap focused log](https://git.kayg.org/attachments/a93a3720-d50d-4522-a76b-10933e2acf8c).
Author
Owner

Both workspace failures passed when run alone: the socket-cap test 1/1 in 2.20s, and the remote-enabled SQLite retirement test 1/1 in 6.66s. The latter requires --features remote; rerun evidence: retirement test. I’m repeating the full iterate gate to confirm the workspace result.

Both workspace failures passed when run alone: the socket-cap test 1/1 in 2.20s, and the remote-enabled SQLite retirement test 1/1 in 6.66s. The latter requires `--features remote`; rerun evidence: [retirement test](https://git.kayg.org/attachments/34d01600-ff31-4837-92aa-697b76d1a4d6). I’m repeating the full iterate gate to confirm the workspace result.
Author
Owner

Pushed through eda6510f1 on sync-journal-r3; focused head controls: 83 pass / 690 assertions. All 8 intentional baseline failures now pass, plus earlier review/hunt tests. Additional source checks cover an unexpected multi-entry operation key and the fallback metadata key; both preserve uncovered entries. Legacy shared-cache checkpoint quota regression reproduced before repair (expected 2 retry entries, only 1 restored); ae9fb8eb0 retains the sole legacy source and writes metadata separately. a6bec85b9 applies coverage to every replacement; eda6510f1 rebases the cached projection over unrelated remote fields after its failing local-rename/remote-cell regression. 92e506c30 preserves fresh lifetimes through delayed origin-wide clear events.

Real VM qualification (4 vCPU, Chromium 149.0.7827.55): 60 windows, 8192 pending, 7 measured new edits per case. Checkpoint seed: save max 3.7 ms / awaited flush max 1.0 ms. Separate operation keys under actual browser quota pressure: checkpoint count 0, entry count 8192; save max 4.3 ms / flush max 4.5 ms. Origin stores 9399484 UTF-16 bytes including quota controls. Native Web Locks enabled; three independent-tab browser controls pass. Load 0.08/0.04/0.01 to 0.15/0.05/0.01. Final fixture now additionally checks restoration of the last completed save.

Initial production transfer: gzip 307195/307200 B, Brotli 256034/256000 B (34 B over); 871ca3fc1 removes nested promise paths instead of changing caps. Deferred was 60171/61440 gzip and 53337/55296 Brotli. Iteration gate is in native tests after fmt/compile-out/clippy; first 99-test native batch passes. Final fast, fresh static comparison and final transfer qualification still pending. No native source, dependency, wire or deployment change.

perf-browser-capacity-final.log
projection-rebase-before.log
multi-entry-before.log

shared-quota-before.log

Pushed through eda6510f1 on sync-journal-r3; focused head controls: 83 pass / 690 assertions. All 8 intentional baseline failures now pass, plus earlier review/hunt tests. Additional source checks cover an unexpected multi-entry operation key and the fallback metadata key; both preserve uncovered entries. Legacy shared-cache checkpoint quota regression reproduced before repair (expected 2 retry entries, only 1 restored); ae9fb8eb0 retains the sole legacy source and writes metadata separately. a6bec85b9 applies coverage to every replacement; eda6510f1 rebases the cached projection over unrelated remote fields after its failing local-rename/remote-cell regression. 92e506c30 preserves fresh lifetimes through delayed origin-wide clear events. Real VM qualification (4 vCPU, Chromium 149.0.7827.55): 60 windows, 8192 pending, 7 measured new edits per case. Checkpoint seed: save max 3.7 ms / awaited flush max 1.0 ms. Separate operation keys under actual browser quota pressure: checkpoint count 0, entry count 8192; save max 4.3 ms / flush max 4.5 ms. Origin stores 9399484 UTF-16 bytes including quota controls. Native Web Locks enabled; three independent-tab browser controls pass. Load 0.08/0.04/0.01 to 0.15/0.05/0.01. Final fixture now additionally checks restoration of the last completed save. Initial production transfer: gzip 307195/307200 B, Brotli 256034/256000 B (34 B over); 871ca3fc1 removes nested promise paths instead of changing caps. Deferred was 60171/61440 gzip and 53337/55296 Brotli. Iteration gate is in native tests after fmt/compile-out/clippy; first 99-test native batch passes. Final fast, fresh static comparison and final transfer qualification still pending. No native source, dependency, wire or deployment change. [perf-browser-capacity-final.log](https://git.kayg.org/attachments/7e870e27-9f77-461c-9149-5d94282a6530) [projection-rebase-before.log](https://git.kayg.org/attachments/e870e1d5-f20b-4db7-876e-f77957d53bf5) [multi-entry-before.log](https://git.kayg.org/attachments/8766104b-2791-4ea6-b25c-3c9bd3d2900f) [shared-quota-before.log](https://git.kayg.org/attachments/784ca2a5-6e48-4d75-adea-c4fea682cb11)
Author
Owner

The second iterate run completed with 621 passed, 1 failed, 52 ignored. The SQLite retirement case passed in the full run; the only failure was auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply (10/16 closed). It passes alone in 2.20s. I’m checking the same test on detached origin/dev under the current host load. Evidence: second iterate log.

The second iterate run completed with 621 passed, 1 failed, 52 ignored. The SQLite retirement case passed in the full run; the only failure was `auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply` (10/16 closed). It passes alone in 2.20s. I’m checking the same test on detached `origin/dev` under the current host load. Evidence: [second iterate log](https://git.kayg.org/attachments/d05d1998-23fa-458d-a9ab-dd73a7a010fa).
Author
Owner

The exact socket-cap test passed on detached origin/dev under the same host window (1 passed in 2.02s); it also passed alone on this branch (1 passed in 2.20s). Only the full parallel suite times out (10/16 closed at the 15s deadline). Evidence: baseline test. I’m rerunning iterate with RUST_TEST_THREADS=2 to reduce in-process contention.

The exact socket-cap test passed on detached `origin/dev` under the same host window (1 passed in 2.02s); it also passed alone on this branch (1 passed in 2.20s). Only the full parallel suite times out (10/16 closed at the 15s deadline). Evidence: [baseline test](https://git.kayg.org/attachments/8ed23549-7eb9-4b66-a6c2-c2b9c957ebb91). I’m rerunning iterate with `RUST_TEST_THREADS=2` to reduce in-process contention.
Author
Owner

Round-3 progress: pushed through 9a4f5bd6e. A strengthened real-browser cold restore exposed localStorage enumeration ordering (latest name became an older pending name). 9aa502875 reserves durable sequence numbers and seeds replay from the newest complete checkpoint. aed2eeb94 isolates locked metadata from the legacy key, so a fallback writer cannot have a newer source overwritten. 7638e3a4a preserves used recovery attempts/held status when old copies reappear. No wire/dependency changes.

Focused tests: 90 pass, 0 fail, 714 assertions; tracer TypeScript check passes. The new ordering and held-copy regressions failed before their fixes.

Locked perf VM, 4 vCPU, 60 windows × 8192 pending: 5/5 browser cases pass. Seven measured new edits per storage mode, maximum save 4.4ms, maximum awaited flush 2.7ms, both below 16ms. Fresh stores restore “Measured 7” in checkpoint and quota-constrained 8192-entry modes. Stored UTF-16 bytes: 4,693,784 and 9,111,368 (latter includes quota controls); journal bytes: 2,360,664 and 4,891,588. Native cross-tab/sign-out/fallback cases pass. This receipt supersedes earlier browser results that did not assert post-write cold replay.

perf-browser-ordered-final.log

ordering-browser-before.log
metadata-isolation.log
held-merge-before.log

Final frontend gate is waiting for a build slot. The initial native iterate failure was a Unix-socket path length caused by this job’s TMPDIR, corrected using a short alias to the same scratch directory; that native test passes with the corrected environment. Full fast and static-size comparison remain pending.

Round-3 progress: pushed through 9a4f5bd6e. A strengthened real-browser cold restore exposed localStorage enumeration ordering (latest name became an older pending name). 9aa502875 reserves durable sequence numbers and seeds replay from the newest complete checkpoint. aed2eeb94 isolates locked metadata from the legacy key, so a fallback writer cannot have a newer source overwritten. 7638e3a4a preserves used recovery attempts/held status when old copies reappear. No wire/dependency changes. Focused tests: 90 pass, 0 fail, 714 assertions; tracer TypeScript check passes. The new ordering and held-copy regressions failed before their fixes. Locked perf VM, 4 vCPU, 60 windows × 8192 pending: 5/5 browser cases pass. Seven measured new edits per storage mode, maximum save 4.4ms, maximum awaited flush 2.7ms, both below 16ms. Fresh stores restore “Measured 7” in checkpoint and quota-constrained 8192-entry modes. Stored UTF-16 bytes: 4,693,784 and 9,111,368 (latter includes quota controls); journal bytes: 2,360,664 and 4,891,588. Native cross-tab/sign-out/fallback cases pass. This receipt supersedes earlier browser results that did not assert post-write cold replay. [perf-browser-ordered-final.log](https://git.kayg.org/attachments/f53b8c0f-bba2-4de3-b13b-02a6b4dc81a2) [ordering-browser-before.log](https://git.kayg.org/attachments/62be09b8-c44b-47d5-bf99-db2f7c39e61e) [metadata-isolation.log](https://git.kayg.org/attachments/d4e3a729-6606-4a33-9f4e-c19958609952) [held-merge-before.log](https://git.kayg.org/attachments/b7f17f15-c2ce-4e31-bf0e-0b5eac992b8a) Final frontend gate is waiting for a build slot. The initial native iterate failure was a Unix-socket path length caused by this job’s TMPDIR, corrected using a short alias to the same scratch directory; that native test passes with the corrected environment. Full fast and static-size comparison remain pending.
Author
Owner

Pushed 95b448b74: trimmed the account-storage critical path without raising transfer limits. Previous frontend run: all 524 tracer tests pass (402 + 105 + 17), but critical transfer was 307209/307200 gzip and 256086/256000 Brotli. Shared prefix discovery, unused cleanup arguments and redundant filters removed; 67 affected tests (580 assertions) and tracer typecheck pass. Frontend/full fast rerun queued for a host slot.

Final current-code perf-VM browser run: 5/5 pass, 60 windows × 8192 pending, maximum save 4.2ms, awaited flush 1.6ms; cold restore and native cross-tab/sign-out remain green. No build-host performance claim.

perf-browser-head-final.log
frontend-size-before-trim.log

Pushed 95b448b74: trimmed the account-storage critical path without raising transfer limits. Previous frontend run: all 524 tracer tests pass (402 + 105 + 17), but critical transfer was 307209/307200 gzip and 256086/256000 Brotli. Shared prefix discovery, unused cleanup arguments and redundant filters removed; 67 affected tests (580 assertions) and tracer typecheck pass. Frontend/full fast rerun queued for a host slot. Final current-code perf-VM browser run: 5/5 pass, 60 windows × 8192 pending, maximum save 4.2ms, awaited flush 1.6ms; cold restore and native cross-tab/sign-out remain green. No build-host performance claim. [perf-browser-head-final.log](https://git.kayg.org/attachments/032c45a6-a66a-46d1-aaed-dc296b872702) [frontend-size-before-trim.log](https://git.kayg.org/attachments/12bdfe1b-f184-4c17-ad54-7952a82c50cb)
Author
Owner

Pushed 425bbec55: simplified the unavailable-lock path and immediate lifetime revocation without a lazy import (offline sign-out must not require fetching another chunk). 69 affected tests pass, 588 assertions; tracer TypeScript check passes. Source ordering/coverage and retry semantics remain unchanged.

Refreshed native-browser proof for this exact head: 5/5 pass. At 60 windows × 8192 pending, seven measured inputs in each storage mode; latest maxima are save 5.1ms and awaited flush 1.8ms, both below 16ms. Both cold restores recover the latest name. This supersedes the prior head’s performance values.

perf-browser-head-final.log
compact-lock-tests.log

Final frontend/full fast is still queued behind host build slots. No new failure is being waived; transfer budget, final static gate and fresh base comparison remain required before finish.

Pushed 425bbec55: simplified the unavailable-lock path and immediate lifetime revocation without a lazy import (offline sign-out must not require fetching another chunk). 69 affected tests pass, 588 assertions; tracer TypeScript check passes. Source ordering/coverage and retry semantics remain unchanged. Refreshed native-browser proof for this exact head: 5/5 pass. At 60 windows × 8192 pending, seven measured inputs in each storage mode; latest maxima are save 5.1ms and awaited flush 1.8ms, both below 16ms. Both cold restores recover the latest name. This supersedes the prior head’s performance values. [perf-browser-head-final.log](https://git.kayg.org/attachments/0b6fb10c-90a2-4090-bbc3-2aa16a4eb7b3) [compact-lock-tests.log](https://git.kayg.org/attachments/b4a2a9f6-9c03-45bd-85d0-0c8d5cedaaa7) Final frontend/full fast is still queued behind host build slots. No new failure is being waived; transfer budget, final static gate and fresh base comparison remain required before finish.
Author
Owner

Capacity update: final frontend/full fast for pushed head 425bbec55 has been queued in the host build-slot wrapper since 23:15 CEST (23:38 now). All four slots remain occupied. Continuing to wait; no gate exception or additional slot is being used. Native-browser/performance and affected TypeScript/model checks are already recorded above. Final transfer check, full fast, fresh stripped base comparison and production screenshots still remain.

Capacity update: final frontend/full fast for pushed head 425bbec55 has been queued in the host build-slot wrapper since 23:15 CEST (23:38 now). All four slots remain occupied. Continuing to wait; no gate exception or additional slot is being used. Native-browser/performance and affected TypeScript/model checks are already recorded above. Final transfer check, full fast, fresh stripped base comparison and production screenshots still remain.
Author
Owner

Pushed 1970667b3 and 83e876dde: grouped acknowledgement updates and removed the redundant post-settlement revision predicate. The two-pass settlement/filter invariant remains (later duplicate copies can settle earlier ones). 90 focused tests pass, 714 assertions; tracer TypeScript check passes.

The production build on 425bbec55 passed all 524 tracer tests and gzip transfer (307167/307200), but Brotli was 256004/256000: 4 bytes over. Limits stay unchanged. The new head is queued for a frontend rebuild, full fast and static comparison. No native source/dependency/wire change.

frontend-425bbec55.log
prune-trim-tests.log

Pushed 1970667b3 and 83e876dde: grouped acknowledgement updates and removed the redundant post-settlement revision predicate. The two-pass settlement/filter invariant remains (later duplicate copies can settle earlier ones). 90 focused tests pass, 714 assertions; tracer TypeScript check passes. The production build on 425bbec55 passed all 524 tracer tests and gzip transfer (307167/307200), but Brotli was 256004/256000: 4 bytes over. Limits stay unchanged. The new head is queued for a frontend rebuild, full fast and static comparison. No native source/dependency/wire change. [frontend-425bbec55.log](https://git.kayg.org/attachments/2076e533-35e2-40be-aa15-83090a553086) [prune-trim-tests.log](https://git.kayg.org/attachments/5025471e-e507-4bf3-bdff-f2290fcf1261)
Author
Owner

Branch-head scripts/verify fast passed (exit 0) at 3b94b1f28de4b7e5bf0d0241bee38acbed5646ad; run used RUST_TEST_THREADS=2, CARGO_BUILD_JOBS=2. Both previously reported server tests passed. Static sizes: x86_64 21,389,296 bytes; aarch64 19,561,656 bytes. TypeScript protocol suite: 39 pass, 0 fail, 36,135 expectations. Full transcript: verify-fast-final.log.

Verbatim Rust gate summary:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
Branch-head `scripts/verify fast` passed (exit 0) at `3b94b1f28de4b7e5bf0d0241bee38acbed5646ad`; run used `RUST_TEST_THREADS=2`, `CARGO_BUILD_JOBS=2`. Both previously reported server tests passed. Static sizes: x86_64 21,389,296 bytes; aarch64 19,561,656 bytes. TypeScript protocol suite: 39 pass, 0 fail, 36,135 expectations. Full transcript: [verify-fast-final.log](https://git.kayg.org/attachments/ba3e63b9-f249-494a-96d9-9021b4d412f9). Verbatim Rust gate summary: ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ```
Author
Owner

Head 83e876dde preflight production build passes unchanged limits: critical gzip 307173/307200 bytes, Brotli 255890/256000; deferred gzip 61092/61440, Brotli 54173/55296. Full scripts/verify fast is running: fmt, VT fmt, plugin compile-out and clippy passed; native tests continue without a recorded failure so far.

Final exact-head browser run: 5/5 pass on the locked 4-vCPU perf VM, Chrome 149.0.7827.55, load 0.00/0.00/0.00. At 60 windows × 8192 pending, seven measured new edits per mode: maximum save 4.6ms, maximum awaited flush 3.9ms. Both modes cold-restore “Measured 7”. Checkpoint/entry journal UTF-16 byte counts 2,360,664/4,891,588; origin totals 4,693,784/9,111,368 (second includes quota controls). No build-host timing is performance evidence.

Four production-build screenshots are attached for independent visual review: ink/paper, desktop 1440×900 and touch-phone emulation 393×852, DPR 1/2. Driver exposes only the existing shared toast on the real production core; recovery behavior is verified separately by model and native-browser tests. Text and viewport bounds pass; phone pointer is coarse. Author makes no visual-quality judgment. Owned mock-server PID 2289342 is confirmed gone.

perf-browser-final-head.log
frontend-final.log
notice-capture-final.log
ui-production-build.txt
notice-phone-ink.png
notice-phone-paper.png
notice-desktop-ink.png
notice-desktop-paper.png

Final full-gate transcript, fresh stripped-static base comparison and cleanup remain before finish.

Head 83e876dde preflight production build passes unchanged limits: critical gzip 307173/307200 bytes, Brotli 255890/256000; deferred gzip 61092/61440, Brotli 54173/55296. Full scripts/verify fast is running: fmt, VT fmt, plugin compile-out and clippy passed; native tests continue without a recorded failure so far. Final exact-head browser run: 5/5 pass on the locked 4-vCPU perf VM, Chrome 149.0.7827.55, load 0.00/0.00/0.00. At 60 windows × 8192 pending, seven measured new edits per mode: maximum save 4.6ms, maximum awaited flush 3.9ms. Both modes cold-restore “Measured 7”. Checkpoint/entry journal UTF-16 byte counts 2,360,664/4,891,588; origin totals 4,693,784/9,111,368 (second includes quota controls). No build-host timing is performance evidence. Four production-build screenshots are attached for independent visual review: ink/paper, desktop 1440×900 and touch-phone emulation 393×852, DPR 1/2. Driver exposes only the existing shared toast on the real production core; recovery behavior is verified separately by model and native-browser tests. Text and viewport bounds pass; phone pointer is coarse. Author makes no visual-quality judgment. Owned mock-server PID 2289342 is confirmed gone. [perf-browser-final-head.log](https://git.kayg.org/attachments/e36a820f-c933-4860-bfdb-59f9bdfbb9e2) [frontend-final.log](https://git.kayg.org/attachments/e700d0f0-dafa-4c6a-a8cf-90b612c52813) [notice-capture-final.log](https://git.kayg.org/attachments/72e2b8bb-4f48-48d3-88a8-f9a0c629b0ed) [ui-production-build.txt](https://git.kayg.org/attachments/87c440f3-9d3e-4f1b-8e89-3335aa30957b) ![notice-phone-ink.png](https://git.kayg.org/attachments/e6ef2efb-d0a3-43ce-9703-9f430cc6c1a1) ![notice-phone-paper.png](https://git.kayg.org/attachments/f69cd851-88f0-4347-8ce1-327be9d382ea) ![notice-desktop-ink.png](https://git.kayg.org/attachments/9e81017c-7a7c-422f-8ad5-aef74d39117f) ![notice-desktop-paper.png](https://git.kayg.org/attachments/7569809b-8c33-417f-a78a-bf3cd8df4f2e) Final full-gate transcript, fresh stripped-static base comparison and cleanup remain before finish.
Author
Owner

The first merge-base size build stopped before Rust compilation: its separate target lacked auth-tools/zig/zig (sccache: Compiler not supported from .cargo/musl-cc.sh). I’m initializing the baseline target with scripts/auth-toolchain and retrying. Evidence: build log.

The first merge-base size build stopped before Rust compilation: its separate target lacked `auth-tools/zig/zig` (`sccache: Compiler not supported` from `.cargo/musl-cc.sh`). I’m initializing the baseline target with `scripts/auth-toolchain` and retrying. Evidence: [build log](https://git.kayg.org/attachments/244dfbcd-98c1-40fd-b37f-413163dc12ae).
Author
Owner

Full fast milestone on 83e876dde: fmt, VT fmt, CLI plugin compile-out, clippy, SSH runtime helper, workspace tests, SSH inode fixture and cargo-deny have completed without a failure waiver. The real backend recovered-version-zero receipt regression passes. Static release builds/linkage/key-memory/size checks are running now; final TypeScript/protocol phase and fresh baseline comparison follow.

Live transcript: /home/kayg/.cache/codex-scratch/sync-journal-r3/evidence/verify-fast-final.log (full verbatim attachment follows when complete). Perf-VM job directory is removed; its shared dependency target was retained. No deployment or protected-branch push.

Full fast milestone on 83e876dde: fmt, VT fmt, CLI plugin compile-out, clippy, SSH runtime helper, workspace tests, SSH inode fixture and cargo-deny have completed without a failure waiver. The real backend recovered-version-zero receipt regression passes. Static release builds/linkage/key-memory/size checks are running now; final TypeScript/protocol phase and fresh baseline comparison follow. Live transcript: /home/kayg/.cache/codex-scratch/sync-journal-r3/evidence/verify-fast-final.log (full verbatim attachment follows when complete). Perf-VM job directory is removed; its shared dependency target was retained. No deployment or protected-branch push.
Author
Owner

Size comparison complete at HEAD 3b94b1f28de4b7e5bf0d0241bee38acbed5646ad. The identical scripts/static-cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl recipe produced stripped static binaries of 21,389,296 bytes at merge base abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e and branch head, delta 0 bytes. Baseline build: 27m 06s. Receipt: size-baseline-x86.log.

Size comparison complete at HEAD `3b94b1f28de4b7e5bf0d0241bee38acbed5646ad`. The identical `scripts/static-cargo build --locked --release --package infraternal --target x86_64-unknown-linux-musl` recipe produced stripped static binaries of 21,389,296 bytes at merge base `abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e` and branch head, delta 0 bytes. Baseline build: 27m 06s. Receipt: [size-baseline-x86.log](https://git.kayg.org/attachments/8515f5b7-509d-4d2d-afe1-9c29c0e0015d).
Author
Owner

83e876dde x86_64 static milestone: production trust PASS; ELF is static-pie linked and stripped; PT_INTERP absent. Size 21,389,296 bytes, exactly the unchanged 21,389,296-byte cap. Key-memory initialization=1, locked pages and dump exclusion enabled. Aarch64 static build is running. Fresh e157f9b01 base comparison remains after the final gate (the zero cap delta is not that comparison).

Verbatim check lines from /home/kayg/.cache/codex-scratch/sync-journal-r3/evidence/verify-fast-final.log:

PT_INTERP: absent; size: 21389296 bytes; cap: 21389296 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
83e876dde x86_64 static milestone: production trust PASS; ELF is static-pie linked and stripped; PT_INTERP absent. Size 21,389,296 bytes, exactly the unchanged 21,389,296-byte cap. Key-memory initialization=1, locked pages and dump exclusion enabled. Aarch64 static build is running. Fresh e157f9b01 base comparison remains after the final gate (the zero cap delta is not that comparison). Verbatim check lines from /home/kayg/.cache/codex-scratch/sync-journal-r3/evidence/verify-fast-final.log: ``` PT_INTERP: absent; size: 21389296 bytes; cap: 21389296 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled ```
Author
Owner

The real-engine check is waiting for a host build slot. The queued production tracer build has not started; all four regular slots remain occupied by active runs. No failure occurred. Need one slot to be released; the build-slot wrapper is still waiting.

The real-engine check is waiting for a host build slot. The queued production tracer build has not started; all four regular slots remain occupied by active runs. No failure occurred. Need one slot to be released; the build-slot wrapper is still waiting.
Author
Owner

Finished at branch head 3b94b1f28de4b7e5bf0d0241bee38acbed5646ad (sync-p3s, pushed to origin/sync-p3s; worktree clean).

The simulated 200 ms RTT Bun suites passed: 42 tests, 244 assertions. The production real-server layout sync case passed 1/1 with REAL_ONE_WAY_MS=100 (100 ms each way, 200 ms RTT), in 31.0 s. Ten windows restored on a fresh phone with matching order; concurrent edits converged, and offline reconnect reconciled to seven windows. Receipts: real-layout-sync.log, functional.json, desktop screenshot, phone screenshot.

Stripped static x86_64 size: merge base abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e 21,389,296 bytes; branch 21,389,296 bytes; delta 0 bytes. Baseline build receipt.

Final scripts/verify fast exited 0. Gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [4.03s]

Full final fast transcript.

Finished at branch head `3b94b1f28de4b7e5bf0d0241bee38acbed5646ad` (`sync-p3s`, pushed to `origin/sync-p3s`; worktree clean). The simulated 200 ms RTT Bun suites passed: 42 tests, 244 assertions. The production real-server layout sync case passed 1/1 with `REAL_ONE_WAY_MS=100` (100 ms each way, 200 ms RTT), in 31.0 s. Ten windows restored on a fresh phone with matching order; concurrent edits converged, and offline reconnect reconciled to seven windows. Receipts: [real-layout-sync.log](https://git.kayg.org/attachments/47310c1f-048e-4029-bce3-e0b786fff44c), [functional.json](https://git.kayg.org/attachments/f88d180a-ed51-4c2d-b91a-d0faed448c06), [desktop screenshot](https://git.kayg.org/attachments/5f99ab06-cbfc-4c83-abfd-180551d9a13e), [phone screenshot](https://git.kayg.org/attachments/805bac15-c49f-4c11-8c66-d70433933b71). Stripped static x86_64 size: merge base `abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e` 21,389,296 bytes; branch 21,389,296 bytes; delta 0 bytes. [Baseline build receipt](https://git.kayg.org/attachments/8515f5b7-509d-4d2d-afe1-9c29c0e0015d). Final `scripts/verify fast` exited 0. Gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [4.03s] ``` [Full final fast transcript](https://git.kayg.org/attachments/ba3e63b9-f249-494a-a96d-9021b4d412f9).
Author
Owner

Current pushed head 1ee6a8769 (after 503b4d8d3 and 293acab5e). All 103 focused journal/account/inventory tests pass, 764 assertions; tracer TypeScript check passes.

New reproduced ordering finding: a transient failure to enumerate source keys was treated as an empty complete source set. A later saved name restored as Earlier instead of Latest, despite both records remaining. 293acab5e propagates enumeration failure and marks the read incomplete; new edits append without publishing a complete checkpoint. Regression fails before and passes after.

503b4d8d3 moves journal-only enumeration out of the critical module and replaces scalar-prefix scans with direct key removals. Measured fixture work: 122 key reads for 38 keys before; 37 after, with peer data intact. 1ee6a8769 moves the unchanged JSON cache controller alongside its only production consumers (deferred canvas/inventory), leaving sign-out dependencies and lock transactions intact.

Full fast on 83e876dde passed every Rust row, both exact static caps (21,389,296 / 19,561,656 bytes), typecheck and all 524 tracer tests, but its final critical Brotli was 256017/256000. An earlier build of that same head was 255890. The 293acab5e preflight passes the actual limits (gzip 307123/307200; Brotli 255944/256000), but lacks enough room for the observed metadata variation. Repeated preflights with extra room run before the next full fast. Limits are unchanged. No native or wire changes.

verify-fast-83e876dde-before-trim.log
cleanup-scan-before.log
cleanup-scan-after.log
listing-recovery-before.log
listing-recovery-after.log

New-head browser refresh, final full fast, fresh static base comparison and local cleanup remain. Earlier browser/UI receipts are labeled with their actual head 83e876dde.

Current pushed head 1ee6a8769 (after 503b4d8d3 and 293acab5e). All 103 focused journal/account/inventory tests pass, 764 assertions; tracer TypeScript check passes. New reproduced ordering finding: a transient failure to enumerate source keys was treated as an empty complete source set. A later saved name restored as Earlier instead of Latest, despite both records remaining. 293acab5e propagates enumeration failure and marks the read incomplete; new edits append without publishing a complete checkpoint. Regression fails before and passes after. 503b4d8d3 moves journal-only enumeration out of the critical module and replaces scalar-prefix scans with direct key removals. Measured fixture work: 122 key reads for 38 keys before; 37 after, with peer data intact. 1ee6a8769 moves the unchanged JSON cache controller alongside its only production consumers (deferred canvas/inventory), leaving sign-out dependencies and lock transactions intact. Full fast on 83e876dde passed every Rust row, both exact static caps (21,389,296 / 19,561,656 bytes), typecheck and all 524 tracer tests, but its final critical Brotli was 256017/256000. An earlier build of that same head was 255890. The 293acab5e preflight passes the actual limits (gzip 307123/307200; Brotli 255944/256000), but lacks enough room for the observed metadata variation. Repeated preflights with extra room run before the next full fast. Limits are unchanged. No native or wire changes. [verify-fast-83e876dde-before-trim.log](https://git.kayg.org/attachments/cde8d215-ce19-4590-9c56-463bcccfe106) [cleanup-scan-before.log](https://git.kayg.org/attachments/d4acae13-6b5f-4841-a425-d228b5009a80) [cleanup-scan-after.log](https://git.kayg.org/attachments/0c909d2f-0678-4650-80ea-d2d2def4fcc7) [listing-recovery-before.log](https://git.kayg.org/attachments/be91b6c2-32ad-4014-afb2-a76c4b1bd42f) [listing-recovery-after.log](https://git.kayg.org/attachments/dc8ba001-ea12-44d1-9bf5-0c60ff6117ff) New-head browser refresh, final full fast, fresh static base comparison and local cleanup remain. Earlier browser/UI receipts are labeled with their actual head 83e876dde.
Author
Owner

Completed native-browser regression step; pushed cf98d289ce. The production store now has real-page closure coverage for source-key enumeration failure (the low-level before/fix receipt is in the preceding comment). Type checking and all six Chromium cases pass.

Exact-head measurement: perf VM infraternal-perf-test, 4 vCPU, Chrome 149.0.7827.55, exclusive measurement lock; load 0.13/0.03/0.01 before and 0.20/0.05/0.02 after. At 60 windows and 8192 pending edits, seven measured new edits in each storage mode: checkpoint max completed save 4.6ms / awaited flush 2.1ms; quota-constrained 8192-entry mode max save 4.2ms / flush 3.0ms (16ms ceiling). Both cold restores recover Measured 7 after eight real completed saves. Native-lock concurrent first tabs, sign-out vs queued writer, rejected-lock conservative fallback, and unavailable-source-listing restore all pass.

perf-final.log

Two production transfer preflights and full scripts/verify fast are running on this head; the same-recipe stripped static baseline comparison follows. No deploy.

Completed native-browser regression step; pushed cf98d289ced93240d794fa8d7fcfa4e708d9b2d4. The production store now has real-page closure coverage for source-key enumeration failure (the low-level before/fix receipt is in the preceding comment). Type checking and all six Chromium cases pass. Exact-head measurement: perf VM infraternal-perf-test, 4 vCPU, Chrome 149.0.7827.55, exclusive measurement lock; load 0.13/0.03/0.01 before and 0.20/0.05/0.02 after. At 60 windows and 8192 pending edits, seven measured new edits in each storage mode: checkpoint max completed save 4.6ms / awaited flush 2.1ms; quota-constrained 8192-entry mode max save 4.2ms / flush 3.0ms (16ms ceiling). Both cold restores recover Measured 7 after eight real completed saves. Native-lock concurrent first tabs, sign-out vs queued writer, rejected-lock conservative fallback, and unavailable-source-listing restore all pass. [perf-final.log](https://git.kayg.org/attachments/567adb0f-41fa-4c50-95a3-82155024981b) Two production transfer preflights and full scripts/verify fast are running on this head; the same-recipe stripped static baseline comparison follows. No deploy.
Author
Owner

Production screenshot refresh for cf98d289ce. The capture driver mounts the existing packages/ui toast on the real production core, in touch phone 393x852 DPR2 and desktop 1440x900 DPR1, ink and paper. It is a notice/geometry capture, not the end-to-end recovery flow; six native-browser state/performance cases cover journal behavior separately. Notice text is present once, within the visual viewport in all four captures. No author visual-quality verdict. Owned mock-server PID 2291357 is confirmed gone; the job directory on the perf VM is removed without touching the shared browser installation.

notice-capture-final.log
ui-production-build.txt
notice-phone-ink.png
notice-phone-paper.png
notice-desktop-ink.png
notice-desktop-paper.png

Full gate is now running after two passing repository transfer preflights (critical Brotli 255955 and 255815 / 256000 bytes).

Production screenshot refresh for cf98d289ced93240d794fa8d7fcfa4e708d9b2d4. The capture driver mounts the existing packages/ui toast on the real production core, in touch phone 393x852 DPR2 and desktop 1440x900 DPR1, ink and paper. It is a notice/geometry capture, not the end-to-end recovery flow; six native-browser state/performance cases cover journal behavior separately. Notice text is present once, within the visual viewport in all four captures. No author visual-quality verdict. Owned mock-server PID 2291357 is confirmed gone; the job directory on the perf VM is removed without touching the shared browser installation. [notice-capture-final.log](https://git.kayg.org/attachments/fcddb735-c8bc-465a-908c-b9b149a4de41) [ui-production-build.txt](https://git.kayg.org/attachments/86c72f07-fe5d-4fa5-8b02-77b8e8495e2e) ![notice-phone-ink.png](https://git.kayg.org/attachments/69cb2c2c-75a1-44e6-a6c1-2f2594f57037) ![notice-phone-paper.png](https://git.kayg.org/attachments/1c8c1438-d15f-4dd4-9783-5ee8d40f8c25) ![notice-desktop-ink.png](https://git.kayg.org/attachments/7f1e1f95-538b-4f3a-9e91-d21a56c9832a) ![notice-desktop-paper.png](https://git.kayg.org/attachments/f826d78d-7c5e-45b1-a4dd-2703cafac431) Full gate is now running after two passing repository transfer preflights (critical Brotli 255955 and 255815 / 256000 bytes).
Author
Owner

Milestone: scripts/verify fast PASSED on pushed head cf98d289ce. All native rows pass; tracer 404 + 105 + 17 = 526 tests and protocol 39 tests pass. No baseline exception was needed. Full raw output is attached verbatim; the following blocks are exact excerpts (build-host check durations are not performance evidence).

verify-fast-final.log
gate-final-summary.txt

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 404 pass
 0 fail
 22133 expect() calls
Ran 404 tests across 62 files. [28.27s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [51.50ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [27.18ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [5.62ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.74ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.76ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [34.65ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [13.65ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [33.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [1.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [5.11ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [5.42ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [1.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [9.62ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [1.33ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [1.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [8.49ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [1.83ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [5.57ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [14.30ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.58ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [5.08ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [5.12ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [2.98ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [10.39ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [8.03ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [2.45ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [65.90ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [24.34ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [3.79ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [6.94ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [1.79ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [7.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [7.29ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [11.86ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [2.52ms]
(pass) retirement gives a queued correlated pong one task turn [1.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [2.62ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [7.96ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.95ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.87ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [6.39ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [2.44ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [2.51ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [6.23ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [1.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.88ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [7.35ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [2.68ms]
(pass) a pending confirmation is reset by reconnect [5.58ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [8.88ms]
(pass) a pending confirmation is reset by dispose [9.37ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [13.28ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [16.94ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [7.60ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [2.02ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [138.57ms]
(pass) visibility notices require both peers to support them: false [0.71ms]
(pass) visibility notices require both peers to support them: true [0.38ms]
(pass) hiding a page cancels a retry scheduled while it was visible [1.58ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.72ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [9.07ms]
(pass) a layout subscription starts the connection before any terminal exists [0.79ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [3.57ms]
(pass) resync reopens a feature subscription with the same server ID [0.74ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [35.02ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.72ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.83ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [1.08ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [5.03ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.54ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.15ms]
(pass) query replies negotiate independently with Hello caps 4 [0.02ms]
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [22.51ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [5.73ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [1.41ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [8.49ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [1.28ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [1.01ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.99ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [102.12ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [5.03ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [6.07ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.56ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.41ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.34ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.38ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.28ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.38ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [5.32ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.90ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [1.52ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.35ms]
(pass) review: retained input and consent are local to their terminal window [0.27ms]
(pass) review: selecting a different session removes saved typing and its action [1.23ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.45ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.72ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [9.30ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [8.45ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [1.43ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [1263.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.81ms]
(pass) all requested query families have identities [0.22ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [13.03ms]
(pass) oversized OSC retains BEL termination before a later query [0.14ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [1044.72ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [1.79ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [0.79ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.33ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [15.71ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [282.15ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.98ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [1.95ms]
(pass) nested writes and memory growth cannot replace borrowed input [1.72ms]
(pass) allocation refusal never writes or frees unowned memory [15.99ms]
(pass) empty scopes accept no input and reject later writer use [0.72ms]
(pass) input views of native memory survive allocation-driven memory growth [0.68ms]
(pass) throwing callbacks release exactly their owned input allocation [0.60ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [1.56s]
$ bun run build.ts
built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js
critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes
critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes
deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes
onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes
critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes
critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes
onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes
onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes
onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes
critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes
deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes
onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes
critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes
critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes
onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes
onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes
onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes
onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes
critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes
onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes
onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes
onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes
onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes
critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes
critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes
deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes
onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes
critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes
onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes
onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes
critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes
critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes
onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes
critical main.js: identity=116034 gzip=42101 brotli=36493 bytes
onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes
onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes
onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes
onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes
deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes
onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes
JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes
JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes
JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.40ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.18ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.28ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms]
(pass) split mux header preserves trailing Close [0.28ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.15ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.52ms]
(pass) superseded failure preserves a newer pending refresh [2.97ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [8.54ms]
(pass) review continuation stops after forbidden [1.52ms]
(pass) review continuation stops after superseded [1.51ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.48ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.21ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [3.39ms]
(pass) watch never publishes a partial page; withdrawn=true [2.42ms]
(pass) a superseding equal-revision resync wins over pending page assembly [2.73ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.44ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms]
(pass) shared Mesh event vectors drive the typed watch adapter [11.48ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [5.29s]


 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [1263.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.81ms]
(pass) all requested query families have identities [0.22ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [13.03ms]
(pass) oversized OSC retains BEL termination before a later query [0.14ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [1044.72ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [1.79ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [0.79ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.33ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [15.71ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [282.15ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.98ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [1.95ms]
(pass) nested writes and memory growth cannot replace borrowed input [1.72ms]
(pass) allocation refusal never writes or frees unowned memory [15.99ms]
(pass) empty scopes accept no input and reject later writer use [0.72ms]
(pass) input views of native memory survive allocation-driven memory growth [0.68ms]
(pass) throwing callbacks release exactly their owned input allocation [0.60ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [1.56s]
$ bun run build.ts
built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js
critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes
critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes
deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes
onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes
critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes
critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes
onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes
onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes
onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes
critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes
deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes
onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes
critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes
critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes
onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes
onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes
onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes
onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes
critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes
onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes
onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes
onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes
onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes
critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes
critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes
deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes
onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes
critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes
onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes
onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes
critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes
critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes
onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes
critical main.js: identity=116034 gzip=42101 brotli=36493 bytes
onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes
onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes
onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes
onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes
deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes
onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes
JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes
JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes
JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.40ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.18ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.28ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms]
(pass) split mux header preserves trailing Close [0.28ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.15ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.52ms]
(pass) superseded failure preserves a newer pending refresh [2.97ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [8.54ms]
(pass) review continuation stops after forbidden [1.52ms]
(pass) review continuation stops after superseded [1.51ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.48ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.21ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [3.39ms]
(pass) watch never publishes a partial page; withdrawn=true [2.42ms]
(pass) a superseding equal-revision resync wins over pending page assembly [2.73ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.44ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms]
(pass) shared Mesh event vectors drive the typed watch adapter [11.48ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [5.29s]


 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [1.56s]
$ bun run build.ts
built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js
critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes
critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes
deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes
onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes
critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes
critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes
onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes
onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes
onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes
critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes
deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes
onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes
critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes
critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes
onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes
onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes
onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes
onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes
critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes
onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes
onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes
onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes
onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes
critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes
critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes
deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes
onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes
critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes
onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes
onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes
critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes
critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes
onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes
critical main.js: identity=116034 gzip=42101 brotli=36493 bytes
onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes
onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes
onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes
onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes
onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes
deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes
onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes
JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes
JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes
JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.40ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.18ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.28ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms]
(pass) split mux header preserves trailing Close [0.28ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.15ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.52ms]
(pass) superseded failure preserves a newer pending refresh [2.97ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [8.54ms]
(pass) review continuation stops after forbidden [1.52ms]
(pass) review continuation stops after superseded [1.51ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.48ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.21ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [3.39ms]
(pass) watch never publishes a partial page; withdrawn=true [2.42ms]
(pass) a superseding equal-revision resync wins over pending page assembly [2.73ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.44ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms]
(pass) shared Mesh event vectors drive the typed watch adapter [11.48ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [5.29s]


 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [5.29s]


JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes
JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes
JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited)

The wrapper is now building the e157f9b01 merge-base stripped static binary with the same scripts/static-cargo recipe and one target directory. Size delta and local cleanup are pending; no deploy.

Milestone: scripts/verify fast PASSED on pushed head cf98d289ced93240d794fa8d7fcfa4e708d9b2d4. All native rows pass; tracer 404 + 105 + 17 = 526 tests and protocol 39 tests pass. No baseline exception was needed. Full raw output is attached verbatim; the following blocks are exact excerpts (build-host check durations are not performance evidence). [verify-fast-final.log](https://git.kayg.org/attachments/48c78330-0df2-4d7f-85b4-17c81f3cc3ae) [gate-final-summary.txt](https://git.kayg.org/attachments/1cebf669-fe6c-4ecb-a604-c5bccd8e4723) ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 404 pass 0 fail 22133 expect() calls Ran 404 tests across 62 files. [28.27s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [51.50ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [27.18ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [5.62ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.74ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.76ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [34.65ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [13.65ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [33.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [1.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [5.11ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [5.42ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [1.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [9.62ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [1.33ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [1.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [8.49ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [1.83ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [5.57ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [14.30ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.58ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [5.08ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [5.12ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [2.98ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [10.39ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [8.03ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [2.45ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [65.90ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [24.34ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [3.79ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [6.94ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [1.79ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [7.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [7.29ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [11.86ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [2.52ms] (pass) retirement gives a queued correlated pong one task turn [1.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [2.62ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [7.96ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.95ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.87ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [6.39ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [2.44ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [2.51ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [6.23ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [1.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.88ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [7.35ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [2.68ms] (pass) a pending confirmation is reset by reconnect [5.58ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [8.88ms] (pass) a pending confirmation is reset by dispose [9.37ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [13.28ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [16.94ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [7.60ms] (pass) a socket lost while hidden waits for visibility before reconnecting [2.02ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [138.57ms] (pass) visibility notices require both peers to support them: false [0.71ms] (pass) visibility notices require both peers to support them: true [0.38ms] (pass) hiding a page cancels a retry scheduled while it was visible [1.58ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.72ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [9.07ms] (pass) a layout subscription starts the connection before any terminal exists [0.79ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [3.57ms] (pass) resync reopens a feature subscription with the same server ID [0.74ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [35.02ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.72ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.83ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [1.08ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [5.03ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.54ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.15ms] (pass) query replies negotiate independently with Hello caps 4 [0.02ms] (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [22.51ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [5.73ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [1.41ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [8.49ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [1.28ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [1.01ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.99ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [102.12ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [5.03ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [6.07ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.56ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.41ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.34ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.38ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.28ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.38ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [5.32ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.90ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [1.52ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.35ms] (pass) review: retained input and consent are local to their terminal window [0.27ms] (pass) review: selecting a different session removes saved typing and its action [1.23ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.45ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.72ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [9.30ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [8.45ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [1.43ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [1263.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.81ms] (pass) all requested query families have identities [0.22ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [13.03ms] (pass) oversized OSC retains BEL termination before a later query [0.14ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [1044.72ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [1.79ms] (pass) review: zero-padded CPR gives every real renderer response an identity [0.79ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.33ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [15.71ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [282.15ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.98ms] (pass) escaped writers cannot access released input and callback failure releases the scope [1.95ms] (pass) nested writes and memory growth cannot replace borrowed input [1.72ms] (pass) allocation refusal never writes or frees unowned memory [15.99ms] (pass) empty scopes accept no input and reject later writer use [0.72ms] (pass) input views of native memory survive allocation-driven memory growth [0.68ms] (pass) throwing callbacks release exactly their owned input allocation [0.60ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [1.56s] $ bun run build.ts built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes critical main.js: identity=116034 gzip=42101 brotli=36493 bytes onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.40ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms] (pass) subscription not found ends delivery before a late refresh rejection [1.18ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms] (pass) synchronous subscription refusal releases the transport exactly once [0.28ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms] (pass) split mux header preserves trailing Close [0.28ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.15ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms] (pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.52ms] (pass) superseded failure preserves a newer pending refresh [2.97ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [8.54ms] (pass) review continuation stops after forbidden [1.52ms] (pass) review continuation stops after superseded [1.51ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.48ms] (pass) a changed revision discards earlier pages before assembling its restart [0.21ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [3.39ms] (pass) watch never publishes a partial page; withdrawn=true [2.42ms] (pass) a superseding equal-revision resync wins over pending page assembly [2.73ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.44ms] (pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms] (pass) shared Mesh event vectors drive the typed watch adapter [11.48ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [5.29s] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [1263.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.81ms] (pass) all requested query families have identities [0.22ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [13.03ms] (pass) oversized OSC retains BEL termination before a later query [0.14ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [1044.72ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [1.79ms] (pass) review: zero-padded CPR gives every real renderer response an identity [0.79ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.33ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [15.71ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [282.15ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.98ms] (pass) escaped writers cannot access released input and callback failure releases the scope [1.95ms] (pass) nested writes and memory growth cannot replace borrowed input [1.72ms] (pass) allocation refusal never writes or frees unowned memory [15.99ms] (pass) empty scopes accept no input and reject later writer use [0.72ms] (pass) input views of native memory survive allocation-driven memory growth [0.68ms] (pass) throwing callbacks release exactly their owned input allocation [0.60ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [1.56s] $ bun run build.ts built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes critical main.js: identity=116034 gzip=42101 brotli=36493 bytes onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.40ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms] (pass) subscription not found ends delivery before a late refresh rejection [1.18ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms] (pass) synchronous subscription refusal releases the transport exactly once [0.28ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms] (pass) split mux header preserves trailing Close [0.28ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.15ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms] (pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.52ms] (pass) superseded failure preserves a newer pending refresh [2.97ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [8.54ms] (pass) review continuation stops after forbidden [1.52ms] (pass) review continuation stops after superseded [1.51ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.48ms] (pass) a changed revision discards earlier pages before assembling its restart [0.21ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [3.39ms] (pass) watch never publishes a partial page; withdrawn=true [2.42ms] (pass) a superseding equal-revision resync wins over pending page assembly [2.73ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.44ms] (pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms] (pass) shared Mesh event vectors drive the typed watch adapter [11.48ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [5.29s] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [1.56s] $ bun run build.ts built chunk-emeyj08y.js, chunk-0zqqnjww.js, chunk-5nvvnzfs.js, chunk-s4rw7gbr.js, chunk-08ws9hxm.js, chunk-31krrf35.js, chunk-d9kw9tk2.js, chunk-g3hp4sf5.js, chunk-14ygxf9b.js, chunk-cfrv0pge.js, chunk-gxvqf3b8.js, chunk-hvv71p1c.js, chunk-wdbvryhm.js, chunk-w790kwzw.js, chunk-q5f1da84.js, chunk-w98ryawm.js, chunk-44st5n09.js, chunk-p24fa3c0.js, main.js, chunk-58z43aj8.js, chunk-twk6gp41.js, chunk-myn1kke0.js, chunk-gjycp7wm.js, chunk-jxkwskse.js, chunk-xpha6sd7.js, chunk-rddpmd7a.js, chunk-jvv21f62.js, chunk-tp7925md.js, chunk-c76h7v56.js, chunk-b0b2m0zw.js, chunk-xx0zwpbh.js, chunk-p4ttag34.js, chunk-axbkkqp1.js, chunk-dfb3qh02.js, chunk-m5ft8qhw.js, chunk-ya3gyss7.js, chunk-rscyd5ch.js, chunk-zz3140kp.js, chunk-p63z7bmw.js, chunk-xxd6y8xq.js, chunk-y7s0wmcf.js, chunk-srfd9frq.js, chunk-9vq0ge05.js, chunk-4yth2s8h.js, chunk-snm2jr0h.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-6ay4td4q.js, chunk-d4g3wzze.js, chunk-4jykf3h8.js, chunk-k7y4kc94.js, chunk-13683zec.js, chunk-qjk4gqxh.js, chunk-eca0hcpm.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-5mzg8hhg.js, chunk-0t4q2rdw.js, chunk-ff3nvh2r.js, chunk-xv5xbsp2.js critical chunk-31krrf35.js: identity=5890 gzip=2460 brotli=2136 bytes critical chunk-q5f1da84.js: identity=17631 gzip=6250 brotli=5563 bytes deferred chunk-5mzg8hhg.js: identity=563 gzip=332 brotli=291 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-cfrv0pge.js: identity=707 gzip=364 brotli=305 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-4yth2s8h.js: identity=4640 gzip=1933 brotli=1704 bytes onDemand chunk-b0b2m0zw.js: identity=14570 gzip=5431 brotli=4869 bytes critical chunk-eca0hcpm.js: identity=42876 gzip=14669 brotli=13140 bytes critical chunk-qjk4gqxh.js: identity=199 gzip=160 brotli=134 bytes onDemand chunk-d9kw9tk2.js: identity=6265 gzip=2102 brotli=1864 bytes onDemand chunk-jxkwskse.js: identity=2557 gzip=1179 brotli=1008 bytes onDemand chunk-d4g3wzze.js: identity=6813 gzip=3037 brotli=2755 bytes critical chunk-myn1kke0.js: identity=8377 gzip=3578 brotli=3188 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-dfb3qh02.js: identity=10904 gzip=4431 brotli=4036 bytes deferred chunk-gjycp7wm.js: identity=18892 gzip=5893 brotli=5418 bytes onDemand chunk-snm2jr0h.js: identity=7662 gzip=3398 brotli=2968 bytes critical faulty-terminal.worker.js: identity=1086 gzip=560 brotli=481 bytes critical backdrop.worker.js: identity=243 gzip=213 brotli=158 bytes critical chunk-w98ryawm.js: identity=11706 gzip=4612 brotli=4103 bytes onDemand chunk-xx0zwpbh.js: identity=11039 gzip=4230 brotli=3855 bytes onDemand chunk-y7s0wmcf.js: identity=540 gzip=351 brotli=313 bytes onDemand chunk-p4ttag34.js: identity=1026 gzip=623 brotli=499 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes critical chunk-0t4q2rdw.js: identity=9813 gzip=4021 brotli=3457 bytes onDemand chunk-xxd6y8xq.js: identity=1649 gzip=774 brotli=676 bytes critical chunk-p24fa3c0.js: identity=386 gzip=237 brotli=195 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-hvv71p1c.js: identity=228 gzip=177 brotli=166 bytes onDemand chunk-p63z7bmw.js: identity=1170 gzip=705 brotli=627 bytes onDemand chunk-rddpmd7a.js: identity=1974 gzip=988 brotli=843 bytes onDemand chunk-6ay4td4q.js: identity=48338 gzip=15100 brotli=13455 bytes onDemand chunk-xv5xbsp2.js: identity=1063 gzip=649 brotli=518 bytes critical chunk-m5ft8qhw.js: identity=729022 gzip=210309 brotli=170888 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes critical chunk-w790kwzw.js: identity=6080 gzip=2536 brotli=2225 bytes critical chunk-44st5n09.js: identity=2519 gzip=1010 brotli=877 bytes deferred chunk-jvv21f62.js: identity=1560 gzip=804 brotli=724 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-0zqqnjww.js: identity=191 gzip=167 brotli=131 bytes onDemand chunk-zz3140kp.js: identity=2466 gzip=1107 brotli=939 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes critical chunk-4jykf3h8.js: identity=162 gzip=150 brotli=125 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-ya3gyss7.js: identity=6120 gzip=2770 brotli=2503 bytes critical chunk-emeyj08y.js: identity=34427 gzip=9988 brotli=8966 bytes onDemand chunk-5nvvnzfs.js: identity=6493 gzip=2403 brotli=2141 bytes onDemand chunk-9vq0ge05.js: identity=5331 gzip=2571 brotli=2291 bytes critical chunk-58z43aj8.js: identity=5448 gzip=2607 brotli=2379 bytes critical chunk-twk6gp41.js: identity=1106 gzip=665 brotli=602 bytes onDemand chunk-g3hp4sf5.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes onDemand chunk-xpha6sd7.js: identity=4561 gzip=2002 brotli=1777 bytes critical main.js: identity=116034 gzip=42101 brotli=36493 bytes onDemand chunk-rscyd5ch.js: identity=2791 gzip=1373 brotli=1181 bytes onDemand chunk-13683zec.js: identity=32259 gzip=12381 brotli=11143 bytes onDemand chunk-k7y4kc94.js: identity=6744 gzip=3167 brotli=2881 bytes onDemand chunk-srfd9frq.js: identity=11562 gzip=4695 brotli=4284 bytes onDemand chunk-s4rw7gbr.js: identity=5779 gzip=2368 brotli=2129 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-wdbvryhm.js: identity=2420 gzip=1196 brotli=1075 bytes deferred chunk-08ws9hxm.js: identity=38088 gzip=13868 brotli=12400 bytes onDemand chunk-14ygxf9b.js: identity=3891 gzip=1736 brotli=1504 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes deferred chunk-tp7925md.js: identity=117821 gzip=39691 brotli=34886 bytes JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.40ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.52ms] (pass) subscription not found ends delivery before a late refresh rejection [1.18ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.21ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.19ms] (pass) synchronous subscription refusal releases the transport exactly once [0.28ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [16.93ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.32ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.02ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.27ms] (pass) split mux header preserves trailing Close [0.28ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.15ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.30ms] (pass) a newer paged event owns publication before an earlier refresh resumes [5.86ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.52ms] (pass) superseded failure preserves a newer pending refresh [2.97ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5161.00ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.07ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.77ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [5.74ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.29ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.40ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [8.54ms] (pass) review continuation stops after forbidden [1.52ms] (pass) review continuation stops after superseded [1.51ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.48ms] (pass) a changed revision discards earlier pages before assembling its restart [0.21ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.29ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [3.39ms] (pass) watch never publishes a partial page; withdrawn=true [2.42ms] (pass) a superseding equal-revision resync wins over pending page assembly [2.73ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.44ms] (pass) authoritative resync keeps priority over an equal-revision pending list [2.12ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [3.74ms] (pass) shared Mesh event vectors drive the typed watch adapter [11.48ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [5.29s] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [5.29s] JavaScript transfer, critical: identity=994236 gzip=306981/307200 brotli=255860/256000 bytes JavaScript transfer, deferred: identity=178264 gzip=61270/61440 brotli=54310/55296 bytes JavaScript transfer, onDemand: identity=220051 gzip=87545/20480 brotli=78131/18432 bytes JavaScript transfer, onDemand largest chunk chunk-6ay4td4q.js: gzip=15100/20480 brotli=13455/18432 bytes (class total gzip=87545 brotli=78131, not limited) ``` The wrapper is now building the e157f9b01 merge-base stripped static binary with the same scripts/static-cargo recipe and one target directory. Size delta and local cleanup are pending; no deploy.
Author
Owner

Additional concrete recovery ordering finding, fixed and pushed at 573dc412e3. After D259 expiry but before its coalesced settlement flush, the already-issued retry receipt replaced changes[op_id]=settled with a pending receipt entry. Cold restoration revived one expired retry (expected 0). New production-store regression failed before the fix. Acknowledgement now ignores settled identities; ordered server events remain authoritative. Forcing an immediate flush was rejected because it narrows rather than removes the interleaving.

102 focused tests, 766 assertions and TypeScript checking pass.

late-receipt-store-before.log
late-receipt-after.log

The full green gate previously recorded is for cf98d289c. A fresh final-head gate and perf receipt will follow for this correction; the unchanged native merge-base size build is finishing first. No deploy.

Additional concrete recovery ordering finding, fixed and pushed at 573dc412e3aa383915f7893e08fd99ede672dba5. After D259 expiry but before its coalesced settlement flush, the already-issued retry receipt replaced changes[op_id]=settled with a pending receipt entry. Cold restoration revived one expired retry (expected 0). New production-store regression failed before the fix. Acknowledgement now ignores settled identities; ordered server events remain authoritative. Forcing an immediate flush was rejected because it narrows rather than removes the interleaving. 102 focused tests, 766 assertions and TypeScript checking pass. [late-receipt-store-before.log](https://git.kayg.org/attachments/c17fb724-3e39-4374-99bb-8a0732c10fd6) [late-receipt-after.log](https://git.kayg.org/attachments/1c44d50b-886d-414e-bf66-324296460fd5) The full green gate previously recorded is for cf98d289c. A fresh final-head gate and perf receipt will follow for this correction; the unchanged native merge-base size build is finishing first. No deploy.
Author
Owner

Exact-head browser/performance step complete for 573dc412e3: all six cases pass on locked 4-vCPU perf VM, Chrome 149.0.7827.55; load 0.00/0.00/0.00 before and 0.08/0.02/0.01 after. At 60 windows and 8192 initial pending edits, checkpoint mode max completed save 4.0ms / awaited flush 1.6ms; quota-constrained 8192-entry mode max save 12.2ms / flush 2.3ms. Both are below 16ms. Seven measured edits per mode, plus a warmup edit; both cold restores recover Measured 7. The 12.2ms maximum is retained as measured.

perf-final.log

Full gate on this corrected head remains pending the currently active merge-base native build. The previous green gate belongs to cf98d289c.

Exact-head browser/performance step complete for 573dc412e3aa383915f7893e08fd99ede672dba5: all six cases pass on locked 4-vCPU perf VM, Chrome 149.0.7827.55; load 0.00/0.00/0.00 before and 0.08/0.02/0.01 after. At 60 windows and 8192 initial pending edits, checkpoint mode max completed save 4.0ms / awaited flush 1.6ms; quota-constrained 8192-entry mode max save 12.2ms / flush 2.3ms. Both are below 16ms. Seven measured edits per mode, plus a warmup edit; both cold restores recover Measured 7. The 12.2ms maximum is retained as measured. [perf-final.log](https://git.kayg.org/attachments/8f220ed6-ad51-4768-a85d-1925b9e6faca) Full gate on this corrected head remains pending the currently active merge-base native build. The previous green gate belongs to cf98d289c.
Author
Owner

Native merge-base measurement complete: e157f9b01 stripped static x86_64 binary is 21389296 bytes; same scripts/static-cargo recipe as the green cf98d289c gate, byte-identical SHA256 e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0, delta 0. Its binary is preserved for comparison with corrected head 573dc412e after that head's final gate. No Rust/Cargo changes in this lane.

The new final wrapper is queued on the host build slot. New-head browser/perf checks are complete (6 pass, max save 12.2ms / flush 2.3ms). Perf VM has no remaining processes with the job directory as cwd; the owned directory is removed and shared browser installation retained. Production notice captures remain those of cf98d289c; the only subsequent change is the settled-receipt guard and regression, with no UI component/copy changes.

cf98d289c-static-size-comparison.txt
perf-cleanup-final.txt

Native merge-base measurement complete: e157f9b01 stripped static x86_64 binary is 21389296 bytes; same scripts/static-cargo recipe as the green cf98d289c gate, byte-identical SHA256 e98f7dfafe827f89fc94d442235f886000a253a0cfbd1213983b864db46b7bf0, delta 0. Its binary is preserved for comparison with corrected head 573dc412e after that head's final gate. No Rust/Cargo changes in this lane. The new final wrapper is queued on the host build slot. New-head browser/perf checks are complete (6 pass, max save 12.2ms / flush 2.3ms). Perf VM has no remaining processes with the job directory as cwd; the owned directory is removed and shared browser installation retained. Production notice captures remain those of cf98d289c; the only subsequent change is the settled-receipt guard and regression, with no UI component/copy changes. [cf98d289c-static-size-comparison.txt](https://git.kayg.org/attachments/86831f0b-c79e-4374-88c0-dc5004ac154a) [perf-cleanup-final.txt](https://git.kayg.org/attachments/9b2e5422-f463-4043-8535-166f63ef1514)
Author
Owner

Resumed verification review on review-sync-p3s at 3b94b1f28d (base abedd62b06). Retrieved all #250 and parent #243 comments. Tests only; product code unchanged. Continuing independent recovery ordering/notice/subscription review; no deploy.

Resumed verification review on review-sync-p3s at 3b94b1f28de4b7e5bf0d0241bee38acbed5646ad (base abedd62b068cbd0af0c51488abb0a6e0ddf4ce4e). Retrieved all #250 and parent #243 comments. Tests only; product code unchanged. Continuing independent recovery ordering/notice/subscription review; no deploy.
Author
Owner

Independent review findings on 3b94b1f28 (product unchanged):

  • P3: an edit first created while isWelcomed=false never starts the pending-notice clock. RTT=200ms, virtual time=10000ms: 0 notices, expected 1; edit remains queued.
  • P3: rejection before any RTT sample never arms a finite fallback. Virtual time=60000ms: 0 notices, expected 1.
    Six independent controls pass, including ordered offline replay and 20 drop/reconnect cycles with zero retained timers/subscriptions/listeners after disposal. Two new regressions fail as intended. No P0/P1 established.
    Integration: sync-journal-r3 overlaps constructor/save/event/resync/pump/dispose and product notice callback; preserve async lifetime/storage gating and held-operation expiry when composing these histories. No merge performed. Existing 3-vs-4 RTT discrepancy remains: D267 and wire contract say four, branch says three.

review-tests.log
findings.txt

Independent review findings on 3b94b1f28 (product unchanged): - P3: an edit first created while isWelcomed=false never starts the pending-notice clock. RTT=200ms, virtual time=10000ms: 0 notices, expected 1; edit remains queued. - P3: rejection before any RTT sample never arms a finite fallback. Virtual time=60000ms: 0 notices, expected 1. Six independent controls pass, including ordered offline replay and 20 drop/reconnect cycles with zero retained timers/subscriptions/listeners after disposal. Two new regressions fail as intended. No P0/P1 established. Integration: sync-journal-r3 overlaps constructor/save/event/resync/pump/dispose and product notice callback; preserve async lifetime/storage gating and held-operation expiry when composing these histories. No merge performed. Existing 3-vs-4 RTT discrepancy remains: D267 and wire contract say four, branch says three. [review-tests.log](https://git.kayg.org/attachments/741ebbfb-2b96-4a50-b65a-9d17939b5328) [findings.txt](https://git.kayg.org/attachments/d790cdd2-3911-4f4d-a435-71fc07e7718c)
Author
Owner

Perf-VM relay request for independent review-sync-p3s (#250): please run the existing real-server layout-sync functional qualification with 200 ms shaping on perf-test-01/02/03, recording machine/load. No new benchmark or load generator.
Artifacts after final fast: /home/agent/.cache/codex-scratch/review-sync-p3s/target/x86_64-unknown-linux-musl/release/infraternal and /home/agent/wt-infraternal/review-sync-p3s/apps/tracer/dist. Harness: this branch's apps/tracer/real and playwright.real.config.ts plus packages/protocol/src and tracer/test/evidence-path.ts.
Exact command from apps/tracer on the perf VM (set INFRATERNAL_BIN/TRACER_DIST to copied artifact paths, INFRATERNAL_EVIDENCE_DIR to private evidence, TMPDIR and INFRATERNAL_TEST_STATE_ROOT to a short private runtime root):
TRACER_TEST_PORT=4257 REAL_ONE_WAY_MS=100 /usr/local/bin/perf-run.sh -- bun x playwright test -c playwright.real.config.ts real/layout-sync.spec.ts --grep 'fresh phone restores ten split windows and both devices converge'
Build-host functional run will also be attempted; no build-host performance numbers are evidence. The test-only review changes no native source, dependency or build profile.

Perf-VM relay request for independent review-sync-p3s (#250): please run the existing real-server layout-sync functional qualification with 200 ms shaping on perf-test-01/02/03, recording machine/load. No new benchmark or load generator. Artifacts after final fast: /home/agent/.cache/codex-scratch/review-sync-p3s/target/x86_64-unknown-linux-musl/release/infraternal and /home/agent/wt-infraternal/review-sync-p3s/apps/tracer/dist. Harness: this branch's apps/tracer/real and playwright.real.config.ts plus packages/protocol/src and tracer/test/evidence-path.ts. Exact command from apps/tracer on the perf VM (set INFRATERNAL_BIN/TRACER_DIST to copied artifact paths, INFRATERNAL_EVIDENCE_DIR to private evidence, TMPDIR and INFRATERNAL_TEST_STATE_ROOT to a short private runtime root): TRACER_TEST_PORT=4257 REAL_ONE_WAY_MS=100 /usr/local/bin/perf-run.sh -- bun x playwright test -c playwright.real.config.ts real/layout-sync.spec.ts --grep 'fresh phone restores ten split windows and both devices converge' Build-host functional run will also be attempted; no build-host performance numbers are evidence. The test-only review changes no native source, dependency or build profile.
Author
Owner

Completed/pushed d8b298839: independent test-only recovery controls. Tracer typecheck, cargo fmt and focused suites pass (32 tests, 260 assertions). Two consecutive gaps keep one outstanding snapshot per recovery; late snapshot cannot replace a newer contiguous delta; two offline edits wait for snapshot then send distinct identities in order; 3s RTT and changing RTT obey virtual budgets; 20 drop/reconnect cycles retain one subscription/listener while live and zero timers/subscriptions/listeners after disposal. Native iterate still compiling on the migrated build VM; browser visible-notice regression is prepared, pending the real binary. No product edits.

Completed/pushed d8b298839: independent test-only recovery controls. Tracer typecheck, cargo fmt and focused suites pass (32 tests, 260 assertions). Two consecutive gaps keep one outstanding snapshot per recovery; late snapshot cannot replace a newer contiguous delta; two offline edits wait for snapshot then send distinct identities in order; 3s RTT and changing RTT obey virtual budgets; 20 drop/reconnect cycles retain one subscription/listener while live and zero timers/subscriptions/listeners after disposal. Native iterate still compiling on the migrated build VM; browser visible-notice regression is prepared, pending the real binary. No product edits.
Author
Owner

Completed/pushed 5916174ee: two intentional P3 failing tests for silent pending edits (offline-at-capture; no accepted RTT sample). Focused review output: 6 pass / 2 fail / 87 assertions. Tracer TypeScript check passes. No product edits. Native iterate has reached workspace clippy; real-server visible-notice regression and final fast/static receipts remain pending the build.

Completed/pushed 5916174ee: two intentional P3 failing tests for silent pending edits (offline-at-capture; no accepted RTT sample). Focused review output: 6 pass / 2 fail / 87 assertions. Tracer TypeScript check passes. No product edits. Native iterate has reached workspace clippy; real-server visible-notice regression and final fast/static receipts remain pending the build.
Author
Owner

Iteration finding: CLI compile-out test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response failed at crates/infraternal/src/main.rs:1368 before its assertion: InvalidInput, path must be shorter than SUN_LEN. TMPDIR was the long job evidence/tmp path. Workspace clippy and runtime helper passed. Final gate will use the owned 34-byte alias /home/agent/.cache/codex-scratch/p -> review-sync-p3s/evidence/tmp; no source change or waiver. Full iteration output will be attached with final receipts.

Iteration finding: CLI compile-out test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response failed at crates/infraternal/src/main.rs:1368 before its assertion: InvalidInput, path must be shorter than SUN_LEN. TMPDIR was the long job evidence/tmp path. Workspace clippy and runtime helper passed. Final gate will use the owned 34-byte alias /home/agent/.cache/codex-scratch/p -> review-sync-p3s/evidence/tmp; no source change or waiver. Full iteration output will be attached with final receipts.
Author
Owner

Migrated-host prerequisites repaired: installed repo-pinned cargo-deny 0.20.2 and pinned Chromium 149.0.7827.55 (Playwright revision 1228). Initial real-server run stopped before product execution because the headless browser executable was absent; retry queued.
Literal apps/tracer bun test output (verbatim summary):
557 pass
154 fail
151 errors
81759 expect() calls
Ran 711 tests across 249 files. [36.68s]
151 errors come from loading Playwright .spec.ts with Bun's unit runner; one additional failure was missing dist/chunks.json before build; the remaining two are the intentional P3 review regressions. Production build now succeeds. All .test.ts files are queued separately after build, followed by the requested real-server case and visible-notice regression with REAL_ONE_WAY_MS=100, TRACER_TEST_PORT=4257. No build-host timing claims.
Owned build cleanup removed debug/incremental and stripped completed debug executables, reclaiming 6.3 GiB plus 17,284,168,392 bytes. No shared directory or process touched.

Migrated-host prerequisites repaired: installed repo-pinned cargo-deny 0.20.2 and pinned Chromium 149.0.7827.55 (Playwright revision 1228). Initial real-server run stopped before product execution because the headless browser executable was absent; retry queued. Literal apps/tracer bun test output (verbatim summary): 557 pass 154 fail 151 errors 81759 expect() calls Ran 711 tests across 249 files. [36.68s] 151 errors come from loading Playwright .spec.ts with Bun's unit runner; one additional failure was missing dist/chunks.json before build; the remaining two are the intentional P3 review regressions. Production build now succeeds. All .test.ts files are queued separately after build, followed by the requested real-server case and visible-notice regression with REAL_ONE_WAY_MS=100, TRACER_TEST_PORT=4257. No build-host timing claims. Owned build cleanup removed debug/incremental and stripped completed debug executables, reclaiming 6.3 GiB plus 17,284,168,392 bytes. No shared directory or process touched.
Author
Owner

Capacity finding: shared filesystem free space is now 15 GiB (94% used), despite this job reducing its target from 30 GiB to 8.0 GiB after the native iteration. This job's active target is review-sync-p3s/target only. Corrected browser run is queued in build-slot; final two static targets and same-directory baseline comparison still needed. No other job directory or process touched. Orchestrator may need to reclaim idle shared build output before static qualification; I continue the functional work and will remove my target at finish.

Capacity finding: shared filesystem free space is now 15 GiB (94% used), despite this job reducing its target from 30 GiB to 8.0 GiB after the native iteration. This job's active target is review-sync-p3s/target only. Corrected browser run is queued in build-slot; final two static targets and same-directory baseline comparison still needed. No other job directory or process touched. Orchestrator may need to reclaim idle shared build output before static qualification; I continue the functional work and will remove my target at finish.
Author
Owner

Corrected notice browser case remains queued in build-slot with no test output yet. The requested ten-window real-server layout-sync case already passes at REAL_ONE_WAY_MS=100; the added case's first product attempt stopped in its clock harness (host time lagged the installed browser clock), now corrected to sample browser Date.now(). No visible-notice product finding claimed yet.
Additional exact integration risk: sync-journal-r3 at 573dc412e emits refusal state "unconfirmed". The sync-p3s product callback would treat that string as a definitive refusal and show the wrong rollback message; retaining the journal callback instead would ignore the delayed flag and restore error-tone transient notices. Both states must survive composition. No merge performed.
Host scheduling observation: /usr/local/bin/build-slot.sh currently iterates three slot files (for i in 1 2 3), while this brief describes two. This job uses one wrapper invocation at a time and does not alter the shared wrapper. Free disk is 13 GiB after this job's target cleanup.

Corrected notice browser case remains queued in build-slot with no test output yet. The requested ten-window real-server layout-sync case already passes at REAL_ONE_WAY_MS=100; the added case's first product attempt stopped in its clock harness (host time lagged the installed browser clock), now corrected to sample browser Date.now(). No visible-notice product finding claimed yet. Additional exact integration risk: sync-journal-r3 at 573dc412e emits refusal state "unconfirmed". The sync-p3s product callback would treat that string as a definitive refusal and show the wrong rollback message; retaining the journal callback instead would ignore the delayed flag and restore error-tone transient notices. Both states must survive composition. No merge performed. Host scheduling observation: /usr/local/bin/build-slot.sh currently iterates three slot files (for i in 1 2 3), while this brief describes two. This job uses one wrapper invocation at a time and does not alter the shared wrapper. Free disk is 13 GiB after this job's target cleanup.
Author
Owner

Blocked on shared disk capacity for final static qualification: df now reports 760 MiB available / 100% used, even after removing this job's completed cargo-deny install build output and unused Zig cache. Earlier owned cleanup reclaimed ~23 GiB; current target is ~7 GiB. Other writers consumed space during cleanup. Orchestrator needs to reclaim idle shared output or let active jobs finish cleanup; this job cannot safely complete cold static targets at this capacity and will not touch another job's paths/processes. Corrected single browser check is still queued; functional ten-window/200 ms case already passed. Two P3 notice regressions are pushed at 5916174ee; no product edits or deploy.

Blocked on shared disk capacity for final static qualification: df now reports 760 MiB available / 100% used, even after removing this job's completed cargo-deny install build output and unused Zig cache. Earlier owned cleanup reclaimed ~23 GiB; current target is ~7 GiB. Other writers consumed space during cleanup. Orchestrator needs to reclaim idle shared output or let active jobs finish cleanup; this job cannot safely complete cold static targets at this capacity and will not touch another job's paths/processes. Corrected single browser check is still queued; functional ten-window/200 ms case already passed. Two P3 notice regressions are pushed at 5916174ee; no product edits or deploy.
Author
Owner

Continuation start: sync-journal-r3 restored at 573dc412e3; integrating origin/dev 63773bb3ec on the migrated shared build VM. Retrieved all #250 and parent #243 comments. Retaining the six-case perf receipt and earlier review/hunt tests; sync-p3s is outside this lane. Next: merge resolutions, focused regression tests, sequential pinned static size measurements and final scripts/verify fast. No deploy; only this branch will be pushed.

Continuation start: sync-journal-r3 restored at 573dc412e3aa383915f7893e08fd99ede672dba5; integrating origin/dev 63773bb3ecd990b09d3663c1bd32b2cd8e49991f on the migrated shared build VM. Retrieved all #250 and parent #243 comments. Retaining the six-case perf receipt and earlier review/hunt tests; sync-p3s is outside this lane. Next: merge resolutions, focused regression tests, sequential pinned static size measurements and final scripts/verify fast. No deploy; only this branch will be pushed.
Author
Owner

Merged dev 63773bb3e and pushed sync-journal-r3 at 660aa612b3. Conflict resolution retains both layout-storage-lock and onboarding-load tests in the frontend gate. Dev pin convergence fixture now checks exactly one dispatched edit plus exact peer coordinates, because pending entries no longer live in the shared cache. Initial fixture failure: 124 pass / 1 fail (legacy cache assertion); corrected run: 125 pass / 0 fail / 9,053 assertions across 16 files, including all earlier journal review and hunt regressions. Tracer typecheck, cargo fmt and diff checks pass. Native production inputs match dev; only the prior receipt-validation test differs. Static measurements and final fast remain.

Merged dev 63773bb3e and pushed sync-journal-r3 at 660aa612b330490e1adb23e214efa543159a7095. Conflict resolution retains both layout-storage-lock and onboarding-load tests in the frontend gate. Dev pin convergence fixture now checks exactly one dispatched edit plus exact peer coordinates, because pending entries no longer live in the shared cache. Initial fixture failure: 124 pass / 1 fail (legacy cache assertion); corrected run: 125 pass / 0 fail / 9,053 assertions across 16 files, including all earlier journal review and hunt regressions. Tracer typecheck, cargo fmt and diff checks pass. Native production inputs match dev; only the prior receipt-validation test differs. Static measurements and final fast remain.
Author
Owner

D243 complete at pushed head 660aa612b3. Sequential pinned scripts/static-cargo builds through /usr/local/bin/build-slot.sh produce x86_64 21,386,512 B and aarch64 19,563,608 B; deltas versus dev caps 0 / 0. Both full SHA-256 hashes exactly match the #255 artifact receipt (a981fc26-8d9c-4f89-9b1c-35fc702a8089): the journal lane leaves both native images byte-identical. Caps and docs/PROCESS.md table remain unchanged.

static-comparison.json
static-head.log
merge-focused-final.log

Functional Chromium preflight could not launch: chromium_headless_shell-1228 is missing from the migrated VM browser cache; installing the pinned browser under HOME and retrying. No product assertion ran. Timing specs remain skipped on the build host. Final fast follows.

D243 complete at pushed head 660aa612b330490e1adb23e214efa543159a7095. Sequential pinned scripts/static-cargo builds through /usr/local/bin/build-slot.sh produce x86_64 21,386,512 B and aarch64 19,563,608 B; deltas versus dev caps 0 / 0. Both full SHA-256 hashes exactly match the #255 artifact receipt (a981fc26-8d9c-4f89-9b1c-35fc702a8089): the journal lane leaves both native images byte-identical. Caps and docs/PROCESS.md table remain unchanged. [static-comparison.json](https://git.kayg.org/attachments/f43cecf4-d64f-4b95-a387-6ed773abf4a9) [static-head.log](https://git.kayg.org/attachments/7e882840-ca11-4ab7-b195-486acdac27fe) [merge-focused-final.log](https://git.kayg.org/attachments/a049542a-6c70-4aac-8453-26fa19bea59e) Functional Chromium preflight could not launch: chromium_headless_shell-1228 is missing from the migrated VM browser cache; installing the pinned browser under HOME and retrying. No product assertion ran. Timing specs remain skipped on the build host. Final fast follows.
Author
Owner

Merged-head functional browser qualification: 4 passed, 2 timing cases skipped, using pinned Chromium 149.0.7827.55. Concurrent first tabs, sign-out vs queued writer, rejected-lock fallback and unavailable-source-listing restoration all pass. The missing headless browser was installed; the first launch failure did not execute product assertions. Final scripts/verify fast is now active.

Perf relay for tonight, head 660aa612b3: no new timing result is claimed. Storage/recovery code and timing harness are unchanged from the earlier 573dc412e six-case receipt (max save 12.2 ms / flush 2.3 ms). For a fresh merged-head measurement, the attached archive contains prebuilt browser bundles, two test files and a server-free config. Unpack into the perf job directory within its pinned Playwright 1.61.1 installation, then run from that directory (no checkout or build needed):

TRACER_TEST_PORT=4293 INFRATERNAL_PERF_VM=1 \
JOURNAL_TEST_DIR="$PWD" INFRATERNAL_EVIDENCE_DIR="$PWD/evidence" \
LAYOUT_STORAGE_LOCK_BUNDLE="$PWD/layout-storage-lock.js" \
LAYOUT_JOURNAL_REVIEW_BUNDLE="$PWD/journal-review.js" \
/usr/local/bin/perf-run.sh -- bun x playwright test -c "$PWD/playwright.journal.config.mjs"

Please record machine/load and all JOURNAL_REVIEW rows; six cases expected, including both 60-window/8192-entry modes. This job will not contact a perf host.

journal-perf-relay.tar.gz

Merged-head functional browser qualification: 4 passed, 2 timing cases skipped, using pinned Chromium 149.0.7827.55. Concurrent first tabs, sign-out vs queued writer, rejected-lock fallback and unavailable-source-listing restoration all pass. The missing headless browser was installed; the first launch failure did not execute product assertions. Final scripts/verify fast is now active. Perf relay for tonight, head 660aa612b330490e1adb23e214efa543159a7095: no new timing result is claimed. Storage/recovery code and timing harness are unchanged from the earlier 573dc412e six-case receipt (max save 12.2 ms / flush 2.3 ms). For a fresh merged-head measurement, the attached archive contains prebuilt browser bundles, two test files and a server-free config. Unpack into the perf job directory within its pinned Playwright 1.61.1 installation, then run from that directory (no checkout or build needed): ```sh TRACER_TEST_PORT=4293 INFRATERNAL_PERF_VM=1 \ JOURNAL_TEST_DIR="$PWD" INFRATERNAL_EVIDENCE_DIR="$PWD/evidence" \ LAYOUT_STORAGE_LOCK_BUNDLE="$PWD/layout-storage-lock.js" \ LAYOUT_JOURNAL_REVIEW_BUNDLE="$PWD/journal-review.js" \ /usr/local/bin/perf-run.sh -- bun x playwright test -c "$PWD/playwright.journal.config.mjs" ``` Please record machine/load and all JOURNAL_REVIEW rows; six cases expected, including both 60-window/8192-entry modes. This job will not contact a perf host. [journal-perf-relay.tar.gz](https://git.kayg.org/attachments/a2a4bc08-1f72-462a-b216-d5ed25993d4a)
Author
Owner

Final-gate environment finding: my short fixture root /home/agent/.cache/codex-scratch/j3 was a symlink into this job scratch. Eight CLI restart/security tests failed on the placeholder build: PermissionDenied on admitted replacement execution and an explicit alias-versus-canonical path mismatch. This is not a journal source change or a waived gate. Stopped only this job verification process tree (root PID 3214972), replaced the owned alias with a physical mode-0700 directory at the same short path, and restarted full scripts/verify fast on unchanged 660aa612b. The prior interrupted transcript is retained below.

verify-fast-symlink-root.log

Final-gate environment finding: my short fixture root /home/agent/.cache/codex-scratch/j3 was a symlink into this job scratch. Eight CLI restart/security tests failed on the placeholder build: PermissionDenied on admitted replacement execution and an explicit alias-versus-canonical path mismatch. This is not a journal source change or a waived gate. Stopped only this job verification process tree (root PID 3214972), replaced the owned alias with a physical mode-0700 directory at the same short path, and restarted full scripts/verify fast on unchanged 660aa612b. The prior interrupted transcript is retained below. [verify-fast-symlink-root.log](https://git.kayg.org/attachments/930e0910-0a61-4c3f-a41f-a26fe30e2041)
Author
Owner

Second final-gate setup finding on unchanged 660aa612b: daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up failed at daemon_gone_tests.rs:119 before its assertion (SUN_LEN). Physical TMPDIR /home/agent/.cache/codex-scratch/j3 is 35 bytes; fixture suffix /g<24 hex>/sessions/<32 hex>.sock adds 73, giving 108 bytes versus the Linux 107-byte bound. The prior /home/kayg recipe was one byte shorter. Created an owned physical mode-0700 /home/agent/.cache/codex-scratch/j root (34 bytes, full socket 107) for the next full run. No source or threshold change and no failure waiver. This run passed clippy, helper/path checks and inode reuse; its workspace test row stopped at agent library 147 pass / 1 setup fail / 20 ignored. The process-per-user/static rows are finishing before the corrected full rerun.

Second final-gate setup finding on unchanged 660aa612b: daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up failed at daemon_gone_tests.rs:119 before its assertion (SUN_LEN). Physical TMPDIR /home/agent/.cache/codex-scratch/j3 is 35 bytes; fixture suffix /g<24 hex>/sessions/<32 hex>.sock adds 73, giving 108 bytes versus the Linux 107-byte bound. The prior /home/kayg recipe was one byte shorter. Created an owned physical mode-0700 /home/agent/.cache/codex-scratch/j root (34 bytes, full socket 107) for the next full run. No source or threshold change and no failure waiver. This run passed clippy, helper/path checks and inode reuse; its workspace test row stopped at agent library 147 pass / 1 setup fail / 20 ignored. The process-per-user/static rows are finishing before the corrected full rerun.
Author
Owner

Finished continuation on sync-journal-r3, pushed HEAD 660aa612b330490e1adb23e214efa543159a7095; remote head verified and worktree clean. Merged dev 63773bb3e (release 9.4, #255, VM fixture fixes and D311). No deploy; issue remains open. sync-p3s was not changed.

Merge resolutions are recorded in the merge commit: retain both journal-lock and onboarding-load gate tests; replace the dev pin fixture's obsolete shared-cache pending assertion with exactly one dispatched edit plus exact peer-coordinate convergence. No new product behavior was needed for integration. All earlier journal review/hunt regressions pass: focused 125 tests, 9,053 assertions. Native real-browser functional cases 4/4 pass; the two timing cases are skipped on the build VM. Reviewer checklist completed for locking/lifetime, source coverage and cleanup retries, immutable sent inputs, held-edit resolution, account isolation, module docs and frozen wire/dependency scope.

D243: same pinned recipe, sequential builds through build-slot. x86_64 21,386,512 B, aarch64 19,563,608 B, delta 0 / 0 versus dev caps. Both full hashes match #255's recorded artifacts: byte-identical native images. Caps and PROCESS table remain unchanged. Final-gate artifacts were hashed again before removal.

Final scripts/verify fast: exit 0, no failure waiver. Environment: sourced ~/infraternal-env.sh; prescribed CARGO_TARGET_DIR; CARGO_BUILD_JOBS=2, RUST_TEST_THREADS=2; development/test debug information and incremental output disabled, release recipe unchanged; physical 34-byte TMPDIR/state root. Earlier symlink and 35-byte socket-path setup failures are preserved in the preceding comments and attachments. Corrected full run passes agent library 148/148 active, server 634/634 active (including recovered-ID receipts and full-place socket cap), and process-per-user 199/199 active.

Full gate output is attached verbatim. Exact excerpts:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 416 pass
 0 fail
 22200 expect() calls
Ran 416 tests across 63 files. [30.38s]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [284.00ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [321.00ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.27s]

JavaScript transfer, critical: identity=987898 gzip=306003/307200 brotli=254948/256000 bytes
JavaScript transfer, deferred: identity=178254 gzip=61373/61440 brotli=54465/55296 bytes

No new timing claim after the merge: storage/recovery implementation and timing harness are unchanged from 573dc412e. The previous six-case perf result (max save 12.2 ms / flush 2.3 ms) retains that head attribution. A portable prebuilt relay archive and exact perf-run command for tonight are in the preceding comment; this job contacted no perf host.

Cleanup complete: no process using the owned target remained; CARGO_TARGET_DIR and both owned physical short fixture directories were deleted. Evidence and prebuilt perf relay remain outside the checkout. No generated evidence was committed.

How to test:

  1. Edit distinct fields offline in two tabs, close them abruptly, then restore: both edits remain.
  2. Queue a write behind the account lock, sign out, release it: account journal stays cleared.
  3. Reconnect after a missing receipt: a later proving snapshot settles it; otherwise one identical retry ends with a visible unconfirmed-change notice within the recovery tail.

static-comparison.json
static-head.log
merge-focused-final.log

verify-fast-final.log
browser-and-gate-retry.log
verify-fast-35byte-root.log
cleanup-processes.json
cleanup-final.json

Finished continuation on `sync-journal-r3`, pushed HEAD `660aa612b330490e1adb23e214efa543159a7095`; remote head verified and worktree clean. Merged dev `63773bb3e` (release 9.4, #255, VM fixture fixes and D311). No deploy; issue remains open. `sync-p3s` was not changed. Merge resolutions are recorded in the merge commit: retain both journal-lock and onboarding-load gate tests; replace the dev pin fixture's obsolete shared-cache pending assertion with exactly one dispatched edit plus exact peer-coordinate convergence. No new product behavior was needed for integration. All earlier journal review/hunt regressions pass: focused 125 tests, 9,053 assertions. Native real-browser functional cases 4/4 pass; the two timing cases are skipped on the build VM. Reviewer checklist completed for locking/lifetime, source coverage and cleanup retries, immutable sent inputs, held-edit resolution, account isolation, module docs and frozen wire/dependency scope. D243: same pinned recipe, sequential builds through build-slot. x86_64 **21,386,512 B**, aarch64 **19,563,608 B**, delta **0 / 0** versus dev caps. Both full hashes match #255's recorded artifacts: byte-identical native images. Caps and PROCESS table remain unchanged. Final-gate artifacts were hashed again before removal. Final `scripts/verify fast`: **exit 0**, no failure waiver. Environment: sourced ~/infraternal-env.sh; prescribed CARGO_TARGET_DIR; CARGO_BUILD_JOBS=2, RUST_TEST_THREADS=2; development/test debug information and incremental output disabled, release recipe unchanged; physical 34-byte TMPDIR/state root. Earlier symlink and 35-byte socket-path setup failures are preserved in the preceding comments and attachments. Corrected full run passes agent library 148/148 active, server 634/634 active (including recovered-ID receipts and full-place socket cap), and process-per-user 199/199 active. Full gate output is attached verbatim. Exact excerpts: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 416 pass 0 fail 22200 expect() calls Ran 416 tests across 63 files. [30.38s] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [284.00ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [321.00ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.27s] JavaScript transfer, critical: identity=987898 gzip=306003/307200 brotli=254948/256000 bytes JavaScript transfer, deferred: identity=178254 gzip=61373/61440 brotli=54465/55296 bytes ``` No new timing claim after the merge: storage/recovery implementation and timing harness are unchanged from 573dc412e. The previous six-case perf result (max save 12.2 ms / flush 2.3 ms) retains that head attribution. A portable prebuilt relay archive and exact perf-run command for tonight are in the preceding comment; this job contacted no perf host. Cleanup complete: no process using the owned target remained; CARGO_TARGET_DIR and both owned physical short fixture directories were deleted. Evidence and prebuilt perf relay remain outside the checkout. No generated evidence was committed. How to test: 1. Edit distinct fields offline in two tabs, close them abruptly, then restore: both edits remain. 2. Queue a write behind the account lock, sign out, release it: account journal stays cleared. 3. Reconnect after a missing receipt: a later proving snapshot settles it; otherwise one identical retry ends with a visible unconfirmed-change notice within the recovery tail. [static-comparison.json](https://git.kayg.org/attachments/f43cecf4-d64f-4b95-a387-6ed773abf4a9) [static-head.log](https://git.kayg.org/attachments/7e882840-ca11-4ab7-b195-486acdac27fe) [merge-focused-final.log](https://git.kayg.org/attachments/a049542a-6c70-4aac-8453-26fa19bea59e) [verify-fast-final.log](https://git.kayg.org/attachments/d96e9c09-7a87-4d2c-828a-de1e4355bc10) [browser-and-gate-retry.log](https://git.kayg.org/attachments/dbecfa92-45eb-4647-bc4f-29e21e02d41d) [verify-fast-35byte-root.log](https://git.kayg.org/attachments/5b48a72d-1e89-4e7f-8d2a-c3f73cbb5602) [cleanup-processes.json](https://git.kayg.org/attachments/d1e9ae61-8ce4-44f5-b967-77b6349e1d12) [cleanup-final.json](https://git.kayg.org/attachments/3fdea83f-13d9-4f3e-a452-12e1aab29ef2)
Author
Owner

Independent round-3 verification started on review-sync-journal-r3, detached target 660aa612b3; merge base with dev 63773bb3ec. Tests only; implementation and job worktree remain untouched. Reviewing account locking/sign-out, source inclusion, fallback, held recovery and operation-count complexity; final fast will run on the job head. No deployment.

Independent round-3 verification started on review-sync-journal-r3, detached target 660aa612b330490e1adb23e214efa543159a7095; merge base with dev 63773bb3ecd990b09d3663c1bd32b2cd8e49991f. Tests only; implementation and job worktree remain untouched. Reviewing account locking/sign-out, source inclusion, fallback, held recovery and operation-count complexity; final fast will run on the job head. No deployment.
Author
Owner

Independent round-3 finding R3-01 — P1: fallback writer recreates account data after peer sign-out.

storage-lifetime.ts:16–25,32–42: unavailable Web Locks selects fallback without creating a lifetime marker. The listener watches only that absent marker (or clear-all), so removing the shared drawing on peer sign-out does not revoke the old tab. After delivering every removal event, its next completed save recreates infraternal.canvas.<account>.

Failing test pushed in review-sync-journal-r3 at 7aef0c626: apps/tracer/src/journal-r3-review.test.ts, test review r3: unavailable Web Locks cannot let a peer recreate account data after sign-out. Expected key presence false; actual true; 0 pass / 1 fail / 3 assertions. The peer sweep bypasses the local revocation registry, exactly as independent browser contexts do. Implementation unchanged. Initial TypeScript check could not resolve missing installed Bun/Node type definitions; dependencies will be installed before the next check.

This is a new P1 writes-after-sign-out interleaving. Under the stated round-three rule, redesign needed. Continuing remaining verification and the exact-job-head full fast gate before final counts.

Independent round-3 finding R3-01 — **P1: fallback writer recreates account data after peer sign-out**. `storage-lifetime.ts:16–25,32–42`: unavailable Web Locks selects fallback without creating a lifetime marker. The listener watches only that absent marker (or clear-all), so removing the shared drawing on peer sign-out does not revoke the old tab. After delivering every removal event, its next completed save recreates `infraternal.canvas.<account>`. Failing test pushed in `review-sync-journal-r3` at 7aef0c626: `apps/tracer/src/journal-r3-review.test.ts`, test `review r3: unavailable Web Locks cannot let a peer recreate account data after sign-out`. Expected key presence false; actual true; 0 pass / 1 fail / 3 assertions. The peer sweep bypasses the local revocation registry, exactly as independent browser contexts do. Implementation unchanged. Initial TypeScript check could not resolve missing installed Bun/Node type definitions; dependencies will be installed before the next check. This is a new P1 writes-after-sign-out interleaving. Under the stated round-three rule, **redesign needed**. Continuing remaining verification and the exact-job-head full fast gate before final counts.
Author
Owner

Independent round-3 finding R3-02 — P1: queued startup creates a new lifetime after peer sign-out, with Web Locks working.

storage-lifetime.ts:19–25,32–39, server-store.ts:54–58: third tab holds account lock; peer sign-out queues first; another signed-in page constructs its store and queues startup second. Sweep removes old marker. Startup then sees absence and creates a new marker. Deliver the asynchronous old-marker removal after startup: it is ignored because the replacement nonce currently matches. A later completed save creates private journal state after sign-out.

Failing test pushed in review-sync-journal-r3 at 591852c75: apps/tracer/src/journal-r3-startup-review.test.ts, review r3: a startup queued behind peer sign-out cannot create a replacement lifetime. Expected zero private keys, received four: replacement lifetime, order, snapshot, metadata. 0 pass / 1 fail / 2 assertions. Tracer TypeScript check now passes after frozen dependency installation. Implementation unchanged.

Current count: 0 P0 / 2 P1 / 0 P2 / 0 P3, requiring redesign needed. Exact-job-head fast continues independently in an owned detached checkout, so intentional review failures cannot contaminate that gate.

Independent round-3 finding R3-02 — **P1: queued startup creates a new lifetime after peer sign-out**, with Web Locks working. `storage-lifetime.ts:19–25,32–39`, `server-store.ts:54–58`: third tab holds account lock; peer sign-out queues first; another signed-in page constructs its store and queues startup second. Sweep removes old marker. Startup then sees absence and creates a new marker. Deliver the asynchronous old-marker removal after startup: it is ignored because the replacement nonce currently matches. A later completed save creates private journal state after sign-out. Failing test pushed in `review-sync-journal-r3` at 591852c75: `apps/tracer/src/journal-r3-startup-review.test.ts`, `review r3: a startup queued behind peer sign-out cannot create a replacement lifetime`. Expected zero private keys, received four: replacement lifetime, order, snapshot, metadata. 0 pass / 1 fail / 2 assertions. Tracer TypeScript check now passes after frozen dependency installation. Implementation unchanged. Current count: **0 P0 / 2 P1 / 0 P2 / 0 P3**, requiring **redesign needed**. Exact-job-head fast continues independently in an owned detached checkout, so intentional review failures cannot contaminate that gate.
Author
Owner

Independent review progress at pushed head 40900a1a27: 93 existing focused tests pass / 0 fail / 734 assertions, including earlier journal review and hunt cases. Tracer TypeScript check passes.

R3-03 — P2, storage-journal.ts:183–192: the ordinary 8192-entry append passes a counting control, but after checkpoint retirement throws SecurityError each later single-entry append re-reads every retained source. Two subsequent appends reach a maximum 8195 storage reads, against bounded allowance <=16. Committed failing counting test review r3: cleanup refusal keeps each later 8192-entry flush bounded; no build-host timing claim. Source retention remains safe in this case; the gap is the unconditional O(1) flush claim.

Current findings: 0 P0 / 2 P1 / 1 P2 / 0 P3. Verdict remains redesign needed. Exact-job-head scripts/verify fast is in native compilation; final transcript follows. No product edits or deployment.
findings.md
R3-01.log
R3-02.log
R3-03.log

Independent review progress at pushed head 40900a1a27b71791d4fd8f105e40db68a4453f3e: 93 existing focused tests pass / 0 fail / 734 assertions, including earlier journal review and hunt cases. Tracer TypeScript check passes. R3-03 — **P2**, `storage-journal.ts:183–192`: the ordinary 8192-entry append passes a counting control, but after checkpoint retirement throws SecurityError each later single-entry append re-reads every retained source. Two subsequent appends reach a maximum **8195 storage reads**, against bounded allowance <=16. Committed failing counting test `review r3: cleanup refusal keeps each later 8192-entry flush bounded`; no build-host timing claim. Source retention remains safe in this case; the gap is the unconditional O(1) flush claim. Current findings: **0 P0 / 2 P1 / 1 P2 / 0 P3**. Verdict remains **redesign needed**. Exact-job-head `scripts/verify fast` is in native compilation; final transcript follows. No product edits or deployment. [findings.md](https://git.kayg.org/attachments/03b7612f-bb52-400b-a99d-025bc07198d9) [R3-01.log](https://git.kayg.org/attachments/55b63e14-c249-4019-9a9c-9ec168fe5804) [R3-02.log](https://git.kayg.org/attachments/ba982944-8e7e-44f4-a183-d914e9d583a6) [R3-03.log](https://git.kayg.org/attachments/2c7fdd0f-805d-46ed-aade-596473378734)
Author
Owner

Pushed a0ffc82d5: moved all three review files into apps/tracer/src/canvas/model/, the existing fast frontend test selection, so subsequent implementation gates execute them automatically. Paths now:

  • R3-01: review-r3-fallback.test.ts
  • R3-02: review-r3-startup.test.ts
  • R3-03 plus normal append control: review-r3-flush.test.ts

Only moves/relative imports changed. Fresh run: 1 pass / 3 intentional fail / 10 assertions. Tracer TypeScript check and diff check pass. Earlier finding commits remain in history. Exact job-head fast remains independent at 660aa612b and has passed native tests/advisories; sequential static builds are running. Verdict/counts unchanged: redesign needed, 2 P1 + 1 P2.

Pushed a0ffc82d5: moved all three review files into `apps/tracer/src/canvas/model/`, the existing fast frontend test selection, so subsequent implementation gates execute them automatically. Paths now: - R3-01: `review-r3-fallback.test.ts` - R3-02: `review-r3-startup.test.ts` - R3-03 plus normal append control: `review-r3-flush.test.ts` Only moves/relative imports changed. Fresh run: **1 pass / 3 intentional fail / 10 assertions**. Tracer TypeScript check and diff check pass. Earlier finding commits remain in history. Exact job-head fast remains independent at 660aa612b and has passed native tests/advisories; sequential static builds are running. Verdict/counts unchanged: **redesign needed**, 2 P1 + 1 P2.
Author
Owner

Independent review verification update: exact job head 660aa612b330490e1adb23e214efa543159a7095 passed scripts/verify fast (exit 0). Chromium storage fixtures reproduce R3-01 and R3-02; existing four browser cases pass, as does a holder-closure / unrelated-account control. R3-02 deliberately delays storage listener callbacks; this is a store/lifetime ordering result, not an end-to-end auth-flow claim. Final static-size comparison against merge base is running before handoff.

findings.md
verify-fast.log
review-tests-final.log
focused-with-review-final.log
review-check-final.log
browser-functional.log
real-tab-proof.json

Independent review verification update: exact job head `660aa612b330490e1adb23e214efa543159a7095` passed `scripts/verify fast` (exit 0). Chromium storage fixtures reproduce R3-01 and R3-02; existing four browser cases pass, as does a holder-closure / unrelated-account control. R3-02 deliberately delays storage listener callbacks; this is a store/lifetime ordering result, not an end-to-end auth-flow claim. Final static-size comparison against merge base is running before handoff. [findings.md](https://git.kayg.org/attachments/b4cd815e-b275-4335-b45c-1e4cdb7a5236) [verify-fast.log](https://git.kayg.org/attachments/ddf7212b-444d-4726-8f98-d2060b41ebf7) [review-tests-final.log](https://git.kayg.org/attachments/2004dadd-dae0-4496-8898-f927a906706d) [focused-with-review-final.log](https://git.kayg.org/attachments/24daced6-a1dd-43a3-bb55-26a2ac517f1e) [review-check-final.log](https://git.kayg.org/attachments/2319647b-0953-4ec6-b0c3-506af6a423b6) [browser-functional.log](https://git.kayg.org/attachments/0a313c54-e5fe-412c-933a-ec5041216f96) [real-tab-proof.json](https://git.kayg.org/attachments/7ef4b404-e8a2-46e7-9321-00d50c47005a)
Author
Owner

Independent round-three verdict: redesign needed. Counts: 0 P0 / 2 P1 / 1 P2 / 0 P3. The round-three stop rule applies because R3-01 and R3-02 are new P1 writes after peer sign-out. Do not continue another patch/review round; return the lifetime/sign-out design to the owner/orchestrator. No implementation changes were made.

Target: 660aa612b330490e1adb23e214efa543159a7095; merge base: 63773bb3ecd990b09d3663c1bd32b2cd8e49991f. Review evidence branch: review-sync-journal-r3, head a0ffc82d50cc1460da33b70c75f470cd11e691fc (pushed; tests only).

  • R3-01 P1, storage-lifetime.ts:18,33,42: without Web Locks the old page has no lifetime marker and ignores removal of the shared drawing. Its next save recreates private account data after peer sign-out. Failing test: review r3: unavailable Web Locks cannot let a peer recreate account data after sign-out. Chromium reproduces one recreated key.
  • R3-02 P1, storage-lifetime.ts:19–25,35–38: startup queued behind sign-out creates a new marker after the sweep and accepts a delayed removal event because the new nonce matches. A later save recreates four private keys. Failing test: review r3: a startup queued behind peer sign-out cannot create a replacement lifetime. Three-tab Chromium reproduction uses real locks and buffered listener delivery; this verifies the store/lifetime ordering, not an end-to-end authentication-flow claim.
  • R3-03 P2, storage-journal.ts:181–189: persistent source-cleanup refusal causes each later one-entry flush to re-read all 8,192 retained sources. Failing test: review r3: cleanup refusal keeps each later 8192-entry flush bounded: 8,195 reads versus allowance ≤16. The normal-path 8,192-entry control passes. Counts only; no build-host timing claim.

Regression evidence: earlier-round/hunt suite 93 pass / 0 fail / 734 assertions; combined suite 94 pass / 3 intentional failures / 744 assertions. Final strict TypeScript check and diff whitespace check pass. The existing four Chromium storage-lock cases pass; additional holder-closure and independent-account control passes. No private-mode/Safari qualification claim.

scripts/verify fast ran in an independent detached checkout of the exact job head, without the review tests, and returned exit 0. Verbatim Rust gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Verbatim frontend/protocol totals from the same transcript:

 416 pass
 0 fail
 22200 expect() calls
Ran 416 tests across 63 files. [48.42s]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [535.00ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [424.00ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [3.77s]

Full transcript and test/browser receipts:

findings.md
verify-fast.log
review-tests-final.log
focused-with-review-final.log
review-check-final.log
browser-functional.log
real-tab-proof.json

Browser reproduction source and runner configuration:

real-tab-review.ts.txt
playwright.review.config.mjs.txt

Independent round-three verdict: **redesign needed**. Counts: **0 P0 / 2 P1 / 1 P2 / 0 P3**. The round-three stop rule applies because R3-01 and R3-02 are new P1 writes after peer sign-out. Do not continue another patch/review round; return the lifetime/sign-out design to the owner/orchestrator. No implementation changes were made. Target: `660aa612b330490e1adb23e214efa543159a7095`; merge base: `63773bb3ecd990b09d3663c1bd32b2cd8e49991f`. Review evidence branch: `review-sync-journal-r3`, head `a0ffc82d50cc1460da33b70c75f470cd11e691fc` (pushed; tests only). - **R3-01 P1**, `storage-lifetime.ts:18,33,42`: without Web Locks the old page has no lifetime marker and ignores removal of the shared drawing. Its next save recreates private account data after peer sign-out. Failing test: `review r3: unavailable Web Locks cannot let a peer recreate account data after sign-out`. Chromium reproduces one recreated key. - **R3-02 P1**, `storage-lifetime.ts:19–25,35–38`: startup queued behind sign-out creates a new marker after the sweep and accepts a delayed removal event because the new nonce matches. A later save recreates four private keys. Failing test: `review r3: a startup queued behind peer sign-out cannot create a replacement lifetime`. Three-tab Chromium reproduction uses real locks and buffered listener delivery; this verifies the store/lifetime ordering, not an end-to-end authentication-flow claim. - **R3-03 P2**, `storage-journal.ts:181–189`: persistent source-cleanup refusal causes each later one-entry flush to re-read all 8,192 retained sources. Failing test: `review r3: cleanup refusal keeps each later 8192-entry flush bounded`: 8,195 reads versus allowance ≤16. The normal-path 8,192-entry control passes. Counts only; no build-host timing claim. Regression evidence: earlier-round/hunt suite **93 pass / 0 fail / 734 assertions**; combined suite **94 pass / 3 intentional failures / 744 assertions**. Final strict TypeScript check and diff whitespace check pass. The existing four Chromium storage-lock cases pass; additional holder-closure and independent-account control passes. No private-mode/Safari qualification claim. `scripts/verify fast` ran in an independent detached checkout of the exact job head, without the review tests, and returned **exit 0**. Verbatim Rust gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` Verbatim frontend/protocol totals from the same transcript: ```text 416 pass 0 fail 22200 expect() calls Ran 416 tests across 63 files. [48.42s] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [535.00ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [424.00ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [3.77s] ``` Full transcript and test/browser receipts: [findings.md](https://git.kayg.org/attachments/b4cd815e-b275-4335-b45c-1e4cdb7a5236) [verify-fast.log](https://git.kayg.org/attachments/ddf7212b-444d-4726-8f98-d2060b41ebf7) [review-tests-final.log](https://git.kayg.org/attachments/2004dadd-dae0-4496-8898-f927a906706d) [focused-with-review-final.log](https://git.kayg.org/attachments/24daced6-a1dd-43a3-bb55-26a2ac517f1e) [review-check-final.log](https://git.kayg.org/attachments/2319647b-0953-4ec6-b0c3-506af6a423b6) [browser-functional.log](https://git.kayg.org/attachments/0a313c54-e5fe-412c-933a-ec5041216f96) [real-tab-proof.json](https://git.kayg.org/attachments/7ef4b404-e8a2-46e7-9321-00d50c47005a) Browser reproduction source and runner configuration: [real-tab-review.ts.txt](https://git.kayg.org/attachments/4e3d64a2-f3f7-4ea2-9c55-108c868d7e8c) [playwright.review.config.mjs.txt](https://git.kayg.org/attachments/89945b35-bd85-4b59-800f-9669dfe37f6b)
Author
Owner

Review completion receipt: redesign needed, 0 P0 / 2 P1 / 1 P2 / 0 P3. Review head a0ffc82d50cc1460da33b70c75f470cd11e691fc is clean and matches origin/review-sync-journal-r3. Exact job-head scripts/verify fast passed (verbatim output and full transcript in the verdict comment above).

Fresh stripped x86_64 comparison using the same scripts/static-cargo recipe: job head and merge base are both 21,386,512 bytes, delta 0 bytes, byte-identical SHA-256 c3aba4dc538d0cba60df8dff605aa4c3133ba71b2501a9501836a8992cdfc447. Temporary gate/baseline worktrees, the owned physical fixture roots, and the job target directory have been deleted; review worktree and scratch evidence retained. No implementation fixes or deployment.

findings-final.md
static-comparison.json
baseline-static.log

Review completion receipt: **redesign needed**, 0 P0 / 2 P1 / 1 P2 / 0 P3. Review head `a0ffc82d50cc1460da33b70c75f470cd11e691fc` is clean and matches origin/review-sync-journal-r3. Exact job-head `scripts/verify fast` passed (verbatim output and full transcript in the verdict comment above). Fresh stripped x86_64 comparison using the same `scripts/static-cargo` recipe: job head and merge base are both **21,386,512 bytes**, delta **0 bytes**, byte-identical SHA-256 `c3aba4dc538d0cba60df8dff605aa4c3133ba71b2501a9501836a8992cdfc447`. Temporary gate/baseline worktrees, the owned physical fixture roots, and the job target directory have been deleted; review worktree and scratch evidence retained. No implementation fixes or deployment. [findings-final.md](https://git.kayg.org/attachments/3648e525-876d-48da-9e20-1d61490d5ba5) [static-comparison.json](https://git.kayg.org/attachments/0b0486e1-81ba-4cd3-9c21-d0f7bfb1d929) [baseline-static.log](https://git.kayg.org/attachments/a2575ab1-fc83-454d-b782-6c7029532ca5)
Author
Owner

Plan job started on plan-250-journal from origin/dev 63773bb3ec. Reading all #250 and parent #243 history, round-1/2/3 review tests, D243/D259 and snapshot/receipt contracts. Deliverable is docs/plans/250-layout-journal.md only; existing implementation/review branches remain untouched. Comparing whether any durable client journal is needed before recommending a design. No deployment.

Plan job started on plan-250-journal from origin/dev 63773bb3ecd990b09d3663c1bd32b2cd8e49991f. Reading all #250 and parent #243 history, round-1/2/3 review tests, D243/D259 and snapshot/receipt contracts. Deliverable is docs/plans/250-layout-journal.md only; existing implementation/review branches remain untouched. Comparing whether any durable client journal is needed before recommending a design. No deployment.
Author
Owner

Design drafted and pushed at 0bdf4ca9e on plan-250-journal (base origin/dev 63773bb3e): docs/plans/250-layout-journal.md only. Recommendation: remove durable browser layout/drawing writes, retain per-tab optimistic intents in memory, and let existing server receipts and ordered intents merge changes. Persistent Not saved state explicitly warns that crash/close can lose unconfirmed changes. Two owner questions: accept that loss boundary and cold-offline drawing removal/old-tab cutover. No decision text or product code changed.

Findings from source/contracts: D259 is a terminal reconnect budget, not authority to expire uncertain layout operations after 50 ms (journal.ts:110 and server-store.ts:114 on 660aa612b). A snapshot carries no op_ids; matching effects cannot prove identity. Existing auth/sessions.rs logout revokes the browser session and wakes sockets, but instant peer RAM erasure and fencing old JavaScript localStorage writers cannot be promised. Plan makes both limits explicit. Covers all 5 hunt findings, 7 R1 findings, 9 distinct R2 failure sequences (including both omitted-source cases), and 3 R3 findings as separate table rows; compares all four requested shapes. Roughly 500 production lines removed/replaced versus R3; estimate net 360–420 fewer. Full scripts/verify fast is running through build-slot on the docs-only head; no proposed-runtime timing claim.

Design drafted and pushed at 0bdf4ca9e on plan-250-journal (base origin/dev 63773bb3e): docs/plans/250-layout-journal.md only. Recommendation: remove durable browser layout/drawing writes, retain per-tab optimistic intents in memory, and let existing server receipts and ordered intents merge changes. Persistent Not saved state explicitly warns that crash/close can lose unconfirmed changes. Two owner questions: accept that loss boundary and cold-offline drawing removal/old-tab cutover. No decision text or product code changed. Findings from source/contracts: D259 is a terminal reconnect budget, not authority to expire uncertain layout operations after 50 ms (journal.ts:110 and server-store.ts:114 on 660aa612b). A snapshot carries no op_ids; matching effects cannot prove identity. Existing auth/sessions.rs logout revokes the browser session and wakes sockets, but instant peer RAM erasure and fencing old JavaScript localStorage writers cannot be promised. Plan makes both limits explicit. Covers all 5 hunt findings, 7 R1 findings, 9 distinct R2 failure sequences (including both omitted-source cases), and 3 R3 findings as separate table rows; compares all four requested shapes. Roughly 500 production lines removed/replaced versus R3; estimate net 360–420 fewer. Full scripts/verify fast is running through build-slot on the docs-only head; no proposed-runtime timing claim.
Author
Owner

Plan refinement pushed at 2bfb0544e6: condensed to 1,899 words, retained all 24 failure rows (hunt 5; R1 7; R2 9 sequences; R3 3), and made the logout boundary explicit: already-admitted server work may finish, later admission must fail; no local marker can cancel an in-flight call. Docs-only diff against 63773bb3e verified, whitespace check passes. Full fast began before this prose-only refinement and is still compiling unchanged native inputs; the final checkout/head is clean and pushed. No product code or existing branch changed.

Plan refinement pushed at 2bfb0544e6b777301e2f2c33823f1eef2fe46751: condensed to 1,899 words, retained all 24 failure rows (hunt 5; R1 7; R2 9 sequences; R3 3), and made the logout boundary explicit: already-admitted server work may finish, later admission must fail; no local marker can cancel an in-flight call. Docs-only diff against 63773bb3e verified, whitespace check passes. Full fast began before this prose-only refinement and is still compiling unchanged native inputs; the final checkout/head is clean and pushed. No product code or existing branch changed.
Author
Owner

Verification completed at pushed head 2bfb0544e6b777301e2f2c33823f1eef2fe46751 (docs-only scope). Full fast passed; no product code changed. The run began before the final prose refinement, as noted above; all checked code inputs remained unchanged. Same-recipe merge-base size comparison is running, then cleanup and final handoff.

Gate summary, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Renderer:
 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [39.32s]

Tracer:
 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [395.00ms]

VT web:
 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [397.00ms]

Protocol:
 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.78s]

scripts/verify fast exit=0

verify-fast.log
gate-summary.txt
scope.json

Verification completed at pushed head `2bfb0544e6b777301e2f2c33823f1eef2fe46751` (docs-only scope). Full fast passed; no product code changed. The run began before the final prose refinement, as noted above; all checked code inputs remained unchanged. Same-recipe merge-base size comparison is running, then cleanup and final handoff. Gate summary, verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ Renderer: 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [39.32s] Tracer: 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [395.00ms] VT web: 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [397.00ms] Protocol: 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.78s] scripts/verify fast exit=0 ``` [verify-fast.log](https://git.kayg.org/attachments/148b4ad6-a955-4fe8-8df7-4c93451bd6bb) [gate-summary.txt](https://git.kayg.org/attachments/1e28a5a0-3fb6-442c-adf2-5fb204caa7bf) [scope.json](https://git.kayg.org/attachments/d9637fd9-d26a-4046-8556-414318a494e8)
Author
Owner

Plan job complete. Pushed plan-250-journal at 2bfb0544e6b777301e2f2c33823f1eef2fe46751, based on 63773bb3ecd990b09d3663c1bd32b2cd8e49991f. Only docs/plans/250-layout-journal.md changed (171 lines, approximately 1,899 words).

Recommendation: remove the durable browser layout/drawing journal, retain pending intents in per-tab memory, and use server receipts as the durable merge point with a persistent Not saved state. The plan compares four shapes, covers all 24 hunt/review failure sequences, estimates net 360–420 fewer production lines versus R3, and specifies functional/browser/performance qualification. Owner questions recommend accepting loss of unconfirmed edits on tab loss and no cold-offline private drawing plus old-tab cutover. Existing product behavior and decisions remain unchanged.

Full fast passed (transcript attached in the preceding verification comment). Same-recipe stripped static x86_64 comparison: branch and merge base both 21,386,512 bytes, delta 0 bytes, SHA-256 identical (c3aba4dc538d0cba60df8dff605aa4c3133ba71b2501a9501836a8992cdfc447). Branch aarch64: 19,563,608 bytes. No new runtime measurements claimed.

Gate summary, verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Renderer:
 356 pass
 0 fail
 21671 expect() calls
Ran 356 tests across 60 files. [39.32s]

Tracer:
 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [395.00ms]

VT web:
 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [397.00ms]

Protocol:
 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.78s]

scripts/verify fast exit=0

verify-fast.log
gate-summary.txt
scope.json

size-comparison.json
baseline-static.log
cleanup.json

Cleanup: own target, detached baseline and fixture root removed; own cache daemon stopped; verification process gone; retained plan worktree clean. No product code, existing branch edits, deployment or issue closure.

Plan job complete. Pushed `plan-250-journal` at `2bfb0544e6b777301e2f2c33823f1eef2fe46751`, based on `63773bb3ecd990b09d3663c1bd32b2cd8e49991f`. Only `docs/plans/250-layout-journal.md` changed (171 lines, approximately 1,899 words). Recommendation: remove the durable browser layout/drawing journal, retain pending intents in per-tab memory, and use server receipts as the durable merge point with a persistent Not saved state. The plan compares four shapes, covers all 24 hunt/review failure sequences, estimates net 360–420 fewer production lines versus R3, and specifies functional/browser/performance qualification. Owner questions recommend accepting loss of unconfirmed edits on tab loss and no cold-offline private drawing plus old-tab cutover. Existing product behavior and decisions remain unchanged. Full fast passed (transcript attached in the preceding verification comment). Same-recipe stripped static x86_64 comparison: branch and merge base both 21,386,512 bytes, delta 0 bytes, SHA-256 identical (`c3aba4dc538d0cba60df8dff605aa4c3133ba71b2501a9501836a8992cdfc447`). Branch aarch64: 19,563,608 bytes. No new runtime measurements claimed. Gate summary, verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ Renderer: 356 pass 0 fail 21671 expect() calls Ran 356 tests across 60 files. [39.32s] Tracer: 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [395.00ms] VT web: 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [397.00ms] Protocol: 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.78s] scripts/verify fast exit=0 ``` [verify-fast.log](https://git.kayg.org/attachments/148b4ad6-a955-4fe8-8df7-4c93451bd6bb) [gate-summary.txt](https://git.kayg.org/attachments/1e28a5a0-3fb6-442c-adf2-5fb204caa7bf) [scope.json](https://git.kayg.org/attachments/d9637fd9-d26a-4046-8556-414318a494e8) [size-comparison.json](https://git.kayg.org/attachments/5e0bd763-8955-4a02-9c11-7f1acb0601f4) [baseline-static.log](https://git.kayg.org/attachments/848a0769-0c06-4182-8f7a-da53f5a84931) [cleanup.json](https://git.kayg.org/attachments/f4bf4444-86d0-47d3-bf8a-3946d76b52cb) Cleanup: own target, detached baseline and fixture root removed; own cache daemon stopped; verification process gone; retained plan worktree clean. No product code, existing branch edits, deployment or issue closure.
Author
Owner

Implementation started on layout-per-tab-250, base 2fb412d01 (origin/dev, D312). Approved plan 2bfb0544e carried into the worktree. Reading #250/#243 history and review regressions; replacing durable layout/drawing persistence with per-tab memory and server receipt/event confirmation. Will push atomic commits, attach production desktop/phone light/dark captures, and quote final head fast output. No deployment or credentials in evidence.

Implementation started on layout-per-tab-250, base 2fb412d01 (origin/dev, D312). Approved plan 2bfb0544e carried into the worktree. Reading #250/#243 history and review regressions; replacing durable layout/drawing persistence with per-tab memory and server receipt/event confirmation. Will push atomic commits, attach production desktop/phone light/dark captures, and quote final head fast output. No deployment or credentials in evidence.
Author
Owner

Pushed 664d28138 receipt-identity controls and the per-tab store replacement. Before repair: journal controls 2 pass/3 fail; new memory/notice controls 2 pass/25 fail. After: 50 focused tests pass, 667 assertions; tracer check and fmt/diff checks pass. Live capture/flush/reconnect no longer serialize or write layout storage. The original storage-journal/storage-lifetime/layout-storage-lock modules are unmerged on dev and therefore avoided, not deleted. Remaining work: cold offline/identity writers, logout lifetime freeze and shared persistent pending UI, stronger browser/scale controls and final qualification.

Pushed 664d28138 receipt-identity controls and the per-tab store replacement. Before repair: journal controls 2 pass/3 fail; new memory/notice controls 2 pass/25 fail. After: 50 focused tests pass, 667 assertions; tracer check and fmt/diff checks pass. Live capture/flush/reconnect no longer serialize or write layout storage. The original storage-journal/storage-lifetime/layout-storage-lock modules are unmerged on dev and therefore avoided, not deleted. Remaining work: cold offline/identity writers, logout lifetime freeze and shared persistent pending UI, stronger browser/scale controls and final qualification.
Author
Owner

D312 implementation finding: original-session continuity cannot currently be proved for a suspended tab that misses BroadcastChannel logout, then reconnects after same-account re-login. /auth/session returns user_id/device/fresh (src/auth.ts); device is a caller-provided label and fresh changes on authentication, neither is an original session identity. Connection fresh reconnect uses the ambient cookie after resume refusal. A background check of the same user_id cannot distinguish the replacement session. No queue adoption or private storage writer remains, but that alone cannot satisfy the plan's “revoked session cannot restart a queue under later login” row.

I am continuing functional tests and zero-write controls. Need orchestrator resolution for a server-authenticated original-session binding that does not discard uncertain work or gate D259 recovery. The approved plan forbids a new snapshot field and this job is TypeScript only; I will not claim this row passed from BroadcastChannel tests.

Performance qualification also needs orchestrator relay: shared rules forbid contacting perf hosts from this job. The plan requires locked 4-vCPU runs at 1/10/60 windows and 8192/32768 intents, heap ×3/×10 and D259/D267. No build-host timing will be presented as evidence. Exact runnable artifact will follow after functional browser qualification.

D312 implementation finding: original-session continuity cannot currently be proved for a suspended tab that misses BroadcastChannel logout, then reconnects after same-account re-login. /auth/session returns user_id/device/fresh (src/auth.ts); device is a caller-provided label and fresh changes on authentication, neither is an original session identity. Connection fresh reconnect uses the ambient cookie after resume refusal. A background check of the same user_id cannot distinguish the replacement session. No queue adoption or private storage writer remains, but that alone cannot satisfy the plan's “revoked session cannot restart a queue under later login” row. I am continuing functional tests and zero-write controls. Need orchestrator resolution for a server-authenticated original-session binding that does not discard uncertain work or gate D259 recovery. The approved plan forbids a new snapshot field and this job is TypeScript only; I will not claim this row passed from BroadcastChannel tests. Performance qualification also needs orchestrator relay: shared rules forbid contacting perf hosts from this job. The plan requires locked 4-vCPU runs at 1/10/60 windows and 8192/32768 intents, heap ×3/×10 and D259/D267. No build-host timing will be presented as evidence. Exact runnable artifact will follow after functional browser qualification.
Author
Owner

Pushed f83b82e17 (explicit queue backpressure/coalescing) and 96e18cf97 (legacy retirement ordering). Queue admission now stages placeholder completion/cancellation, owns captured values, and cannot mutate accepted work on refusal. Sent inputs never coalesce. The 32 MiB encoded-byte limit is provisional pending perf-VM heap qualification, not a measured heap bound.

Added receipt-before-snapshot and snapshot-before-receipt import tests, refused import, refused cleanup then successful removal. Focused queue/store/journal/P3 run: 34 pass, 0 fail, 188 assertions. TypeScript, fmt and diff checks pass. Source tests for 8192/32768 edits and 8195 stale keys now exercise those actual counts; no build-host timing claim.

Final fast gate and real-browser qualification remain pending. The earlier queued milestone gate was cancelled before starting because source had changed; no green gate is claimed from it. Original-session continuity and perf relay remain as reported in the preceding finding.

Pushed f83b82e17 (explicit queue backpressure/coalescing) and 96e18cf97 (legacy retirement ordering). Queue admission now stages placeholder completion/cancellation, owns captured values, and cannot mutate accepted work on refusal. Sent inputs never coalesce. The 32 MiB encoded-byte limit is provisional pending perf-VM heap qualification, not a measured heap bound. Added receipt-before-snapshot and snapshot-before-receipt import tests, refused import, refused cleanup then successful removal. Focused queue/store/journal/P3 run: 34 pass, 0 fail, 188 assertions. TypeScript, fmt and diff checks pass. Source tests for 8192/32768 edits and 8195 stale keys now exercise those actual counts; no build-host timing claim. Final fast gate and real-browser qualification remain pending. The earlier queued milestone gate was cancelled before starting because source had changed; no green gate is claimed from it. Original-session continuity and perf relay remain as reported in the preceding finding.
Author
Owner

Pushed 859e0e01e: reference completion during an in-flight logout now remains in RAM while sends pause. A failed logout no longer strands a completed birth. The new regression failed before the fix; all 22 store tests pass (87 assertions). Global canvas shortcuts respect the inert screen. TypeScript/fmt/diff checks pass.

Pushed 78546dfad: prebuilt queue CPU/heap probe, strict compiler checks passing. Please relay the following under the locked 4-vCPU perf VM. This is a measurement artifact, not a checkout or build; the attachment includes the prebuilt probe and test runner. Chromium must already be installed on that VM.

Three-tab queue probe bundle

Extract into ~/infraternal-perf/layout-per-tab-250, then:

cd ~/infraternal-perf/layout-per-tab-250/apps/tracer
LAYOUT_PERF=1 LAYOUT_QUEUE_BUNDLE="$PWD/../../layout-queue-probe.js" INFRATERNAL_EVIDENCE_DIR="$PWD/../../results" TRACER_TEST_PORT=4450 /usr/local/bin/perf-run.sh -- node node_modules/playwright/cli.js test -c playwright.real.config.ts real/layout-queue-perf.spec.ts --workers=1

Return results/layout-queue-perf/matrix.json and the test output, including failed budgets. Matrix: three live tabs, 1/10/60 windows, 8192/32768 retained intents; capture/rebase/reconnect and GC-retained heap, actual three-tab aggregate and per-tab ×10. The bound remains provisional until these measurements. This probe does not establish D259/D267 terminal recovery; the production-browser recovery run still follows the native build.

Full fast is running. Its first compile-out attempt hit a pinned dependency fetch failure; fetching the exact archive into this job's cache produced the required uucode-0.1.0-ZZjBPj96QADXyt5sqwBJUnhaDYs_qBeeKijZvlRa0eqM hash. No dependency/source change. The final gate will need a clean rerun after that failed row.

Pushed 859e0e01e: reference completion during an in-flight logout now remains in RAM while sends pause. A failed logout no longer strands a completed birth. The new regression failed before the fix; all 22 store tests pass (87 assertions). Global canvas shortcuts respect the inert screen. TypeScript/fmt/diff checks pass. Pushed 78546dfad: prebuilt queue CPU/heap probe, strict compiler checks passing. Please relay the following under the locked 4-vCPU perf VM. This is a measurement artifact, not a checkout or build; the attachment includes the prebuilt probe and test runner. Chromium must already be installed on that VM. [Three-tab queue probe bundle](https://git.kayg.org/attachments/415baa00-8dd2-48c0-92b9-ff36330139da) Extract into ~/infraternal-perf/layout-per-tab-250, then: ``` cd ~/infraternal-perf/layout-per-tab-250/apps/tracer LAYOUT_PERF=1 LAYOUT_QUEUE_BUNDLE="$PWD/../../layout-queue-probe.js" INFRATERNAL_EVIDENCE_DIR="$PWD/../../results" TRACER_TEST_PORT=4450 /usr/local/bin/perf-run.sh -- node node_modules/playwright/cli.js test -c playwright.real.config.ts real/layout-queue-perf.spec.ts --workers=1 ``` Return results/layout-queue-perf/matrix.json and the test output, including failed budgets. Matrix: three live tabs, 1/10/60 windows, 8192/32768 retained intents; capture/rebase/reconnect and GC-retained heap, actual three-tab aggregate and per-tab ×10. The bound remains provisional until these measurements. This probe does not establish D259/D267 terminal recovery; the production-browser recovery run still follows the native build. Full fast is running. Its first compile-out attempt hit a pinned dependency fetch failure; fetching the exact archive into this job's cache produced the required uucode-0.1.0-ZZjBPj96QADXyt5sqwBJUnhaDYs_qBeeKijZvlRa0eqM hash. No dependency/source change. The final gate will need a clean rerun after that failed row.
Author
Owner

Correction to the relay command's evidence destination: the harness deliberately rejects output inside its extracted root. Use INFRATERNAL_EVIDENCE_DIR="$PWD/../../../layout-per-tab-250-results" instead of "$PWD/../../results". The returned matrix is then ~/infraternal-perf/layout-per-tab-250-results/layout-queue-perf/matrix.json. Bundle SHA256: e432cca0288a2dab1c62cf6dfb9be14fea9516fc0d47192a70ac26e53aa96fe5.

Correction to the relay command's evidence destination: the harness deliberately rejects output inside its extracted root. Use INFRATERNAL_EVIDENCE_DIR="$PWD/../../../layout-per-tab-250-results" instead of "$PWD/../../results". The returned matrix is then ~/infraternal-perf/layout-per-tab-250-results/layout-queue-perf/matrix.json. Bundle SHA256: e432cca0288a2dab1c62cf6dfb9be14fea9516fc0d47192a70ac26e53aa96fe5.
Author
Owner

Pushed 5616935c6: browser specs now observe layout wire messages in runner RAM rather than browser storage. Added delayed three-tab confirmation, explicit tab-loss/cold-offline behavior and failed-logout/late-completion scenarios. Strict tracer and real-spec compiler checks pass; actual browser runs and screenshots are still pending. Worktree is clean.

Against D312 base 2fb412d01, native crate sources, Cargo manifests/lockfile, toolchain and static-build recipe are unchanged. Static binary comparison has not yet run. Total current diff: 1290 added / 566 removed (tests and carried plan included); production TypeScript alone is 340 added / 239 removed. Unmerged R3 storage modules were never on dev and therefore are avoided, not claimed as deletions from this base.

Pushed 5616935c6: browser specs now observe layout wire messages in runner RAM rather than browser storage. Added delayed three-tab confirmation, explicit tab-loss/cold-offline behavior and failed-logout/late-completion scenarios. Strict tracer and real-spec compiler checks pass; actual browser runs and screenshots are still pending. Worktree is clean. Against D312 base 2fb412d01, native crate sources, Cargo manifests/lockfile, toolchain and static-build recipe are unchanged. Static binary comparison has not yet run. Total current diff: 1290 added / 566 removed (tests and carried plan included); production TypeScript alone is 340 added / 239 removed. Unmerged R3 storage modules were never on dev and therefore are avoided, not claimed as deletions from this base.
Author
Owner

Pushed d6838f396: bind logout completion/failure to the initiating local screen generation. Two before-fix regressions failed: a late success forgot replacement work and a late failure thawed the replacement screen. Four controls now pass (16 assertions), including new-lifetime requests and per-lifetime deduplication. Added logout/notification tests to fast. This is a local callback fence, not the unresolved authenticated-session binding.

Pushed 215854b32: immediate first gap and slow-snapshot watchdog/offline/disposal controls. Combined P3/logout run: 13 pass, 0 fail, 116 assertions. Strict compiler checks pass. Unavailable/recovered-storage browser scenario also added; runtime qualification remains pending.

Current full fast is not green: besides the repaired pinned-fetch failure, unchanged native test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch failed at crates/plugins/ssh/tests/install.rs:2703 with SetupRunning (exit 73). No native source changes; no waiver or baseline pass is claimed. The run is now building static release artifacts. I will rerun the affected test and final head gate.

Pushed d6838f396: bind logout completion/failure to the initiating local screen generation. Two before-fix regressions failed: a late success forgot replacement work and a late failure thawed the replacement screen. Four controls now pass (16 assertions), including new-lifetime requests and per-lifetime deduplication. Added logout/notification tests to fast. This is a local callback fence, not the unresolved authenticated-session binding. Pushed 215854b32: immediate first gap and slow-snapshot watchdog/offline/disposal controls. Combined P3/logout run: 13 pass, 0 fail, 116 assertions. Strict compiler checks pass. Unavailable/recovered-storage browser scenario also added; runtime qualification remains pending. Current full fast is not green: besides the repaired pinned-fetch failure, unchanged native test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch failed at crates/plugins/ssh/tests/install.rs:2703 with SetupRunning (exit 73). No native source changes; no waiver or baseline pass is claimed. The run is now building static release artifacts. I will rerun the affected test and final head gate.
Author
Owner

Pushed 81f02a236: production browser controls pass 4/4; bun run check and production build pass. Scenarios cover three tabs, held confirmation with live terminal input, explicit unconfirmed loss/confirmed recovery, warm/cold offline, failed and successful logout, throwing/recovered storage. Focused canvas/privacy/lifecycle unit run: 319 pass, 0 fail, 20244 assertions. Browser plugin unavailable; repository Playwright used. These are Chromium functional checks with iPhone emulation, not actual iPhone/PWA/private-mode qualification.

Initial captures below are superseded for spacing: a phone capture exposed the persistent pending and wrapped delayed notices overlapping. A shared-component spacing regression/fix is in progress; owner visual review is still required.

desktop-ink.png
desktop-paper.png
phone-ink.png
phone-paper.png

Milestone fast completed: Rust test row FAIL (101), streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch at install.rs:2703 (SetupRunning 73). Other Rust rows passed, including both static builds: x86_64 21431472 bytes; aarch64 19605896 bytes, exact caps. This is not the final head gate; isolated native retry and final head fast follow. Original-session continuity and perf relay remain unresolved as reported.

Pushed 81f02a236: production browser controls pass 4/4; bun run check and production build pass. Scenarios cover three tabs, held confirmation with live terminal input, explicit unconfirmed loss/confirmed recovery, warm/cold offline, failed and successful logout, throwing/recovered storage. Focused canvas/privacy/lifecycle unit run: 319 pass, 0 fail, 20244 assertions. Browser plugin unavailable; repository Playwright used. These are Chromium functional checks with iPhone emulation, not actual iPhone/PWA/private-mode qualification. Initial captures below are superseded for spacing: a phone capture exposed the persistent pending and wrapped delayed notices overlapping. A shared-component spacing regression/fix is in progress; owner visual review is still required. ![desktop-ink.png](https://git.kayg.org/attachments/879be309-14ca-442d-a58e-b97b41e5ca7a) ![desktop-paper.png](https://git.kayg.org/attachments/872c94d5-c4c4-45b8-b5b6-f3bcd0d4a929) ![phone-ink.png](https://git.kayg.org/attachments/f1b745af-a94e-4afd-82e3-ed738a9264bb) ![phone-paper.png](https://git.kayg.org/attachments/764b414f-23fb-4806-853e-3b7ac9d83cf3) Milestone fast completed: Rust test row FAIL (101), streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch at install.rs:2703 (SetupRunning 73). Other Rust rows passed, including both static builds: x86_64 21431472 bytes; aarch64 19605896 bytes, exact caps. This is not the final head gate; isolated native retry and final head fast follow. Original-session continuity and perf relay remain unresolved as reported.
Author
Owner

Pushed 5b9d2980e: replaced the old offline reload durability test by name in its commit message; the phone now asserts advertised loss and restores four server windows. Pushed ef46455fc: R2 held split/close controls inspect decoded intercepted requests, not the upstream observer, and both pipeline/reconnect controls pass.

Production-browser finding: phone and concurrent-close tests had no observed pending identities but a visible Not saved notice. A receipt can dismiss a toast before its first requestAnimationFrame; the queued frame then reopened it. The shared toast now fences animation/hide callbacks by message generation. A phone geometry regression also failed before the shared spacing repair (expected nonoverlap true, actual false): the old hard-coded bottom ignored the key tray and wrapped notice height. The repair measures neighboring notice height and retains the shared CSS anchor. No new private chrome.

Fresh production build targeted rerun: 9 passed, including all new loss/storage/logout scenarios, offline closes across restart, both R2 refusal races and ten-window two-device convergence. Full retained functional rerun is now running; timing specs excluded on this build host. Native original-session binding, perf-VM results and actual iPhone/PWA/private-mode qualification remain open.

Pushed 5b9d2980e: replaced the old offline reload durability test by name in its commit message; the phone now asserts advertised loss and restores four server windows. Pushed ef46455fc: R2 held split/close controls inspect decoded intercepted requests, not the upstream observer, and both pipeline/reconnect controls pass. Production-browser finding: phone and concurrent-close tests had no observed pending identities but a visible Not saved notice. A receipt can dismiss a toast before its first requestAnimationFrame; the queued frame then reopened it. The shared toast now fences animation/hide callbacks by message generation. A phone geometry regression also failed before the shared spacing repair (expected nonoverlap true, actual false): the old hard-coded bottom ignored the key tray and wrapped notice height. The repair measures neighboring notice height and retains the shared CSS anchor. No new private chrome. Fresh production build targeted rerun: 9 passed, including all new loss/storage/logout scenarios, offline closes across restart, both R2 refusal races and ten-window two-device convergence. Full retained functional rerun is now running; timing specs excluded on this build host. Native original-session binding, perf-VM results and actual iPhone/PWA/private-mode qualification remain open.
Author
Owner

Pushed be22c5f6d shared notice fix. Updated production-build captures below supersede the earlier overlapping phone captures. Geometry assertion checks the two visible notices do not intersect; owner visual review is still required. Chromium desktop 1440x900 and iPhone 15 emulation, ink/paper; no actual iPhone/PWA/private-mode claim.

desktop-ink.png
desktop-paper.png
phone-ink.png
phone-paper.png

Production recovery relay artifact (prebuilt UI, unchanged native executable, existing recovery fixture and runner; no checkout/build required): layout-production-recovery.tgz. SHA256 df910f30818effacbaebbac42a3a6b626c986ef5360c8e3363fe522a59282a9d. Extract into ~/infraternal-perf/layout-production-recovery-250. Chromium, node, Python and openssl must already be installed.

This existing recovery driver requires the orchestrator's isolated root mount namespace with a PRIVATE /run/infraternal; it intentionally refuses an ordinary host invocation. Within that established private fixture environment, for each RESTART_SESSIONS=1/10/60 and RESTART_MODE=daemon/shim/closed, run the following through the perf lock (one case per lock hold):

cd ~/infraternal-perf/layout-production-recovery-250
RESTART_MEASURE=1 REAL_ROOT_NAMESPACE=1 RESTART_SESSIONS=60 RESTART_MODE=daemon REAL_ONE_WAY_MS=150 TRACER_TEST_PORT=4450 INFRATERNAL_BIN="$PWD/infraternal" TRACER_DIST="$PWD/apps/tracer/dist" /usr/local/bin/perf-run.sh -- node apps/tracer/real/perf-restart.js

Set the two matrix variables to the case being run. Both desktop locked and phone unlocked cases run by default. Return complete METRIC lines and failed assertions; use the established port-scoped network driver for a true network RTT profile. REAL_ONE_WAY_MS is message delay and is labeled as such by the harness. This supplements the earlier three-tab 8192/32768 queue/heap probe; it does not itself qualify typing with that queue held. All performance qualification remains pending; no build-host timings are evidence.

Pushed be22c5f6d shared notice fix. Updated production-build captures below supersede the earlier overlapping phone captures. Geometry assertion checks the two visible notices do not intersect; owner visual review is still required. Chromium desktop 1440x900 and iPhone 15 emulation, ink/paper; no actual iPhone/PWA/private-mode claim. ![desktop-ink.png](https://git.kayg.org/attachments/4e4525bc-d2d5-4e64-a2bc-a69133b9e540) ![desktop-paper.png](https://git.kayg.org/attachments/a8c65736-0d94-4ad7-99c2-23713d04ee91) ![phone-ink.png](https://git.kayg.org/attachments/8dd375f1-211e-4fad-ae35-8e021e786561) ![phone-paper.png](https://git.kayg.org/attachments/728b958b-523e-4abb-aac3-dcb420032ae7) Production recovery relay artifact (prebuilt UI, unchanged native executable, existing recovery fixture and runner; no checkout/build required): [layout-production-recovery.tgz](https://git.kayg.org/attachments/746ba5cf-831f-4537-9aae-5eb95eb10675). SHA256 df910f30818effacbaebbac42a3a6b626c986ef5360c8e3363fe522a59282a9d. Extract into ~/infraternal-perf/layout-production-recovery-250. Chromium, node, Python and openssl must already be installed. This existing recovery driver requires the orchestrator's isolated root mount namespace with a PRIVATE /run/infraternal; it intentionally refuses an ordinary host invocation. Within that established private fixture environment, for each RESTART_SESSIONS=1/10/60 and RESTART_MODE=daemon/shim/closed, run the following through the perf lock (one case per lock hold): ```sh cd ~/infraternal-perf/layout-production-recovery-250 RESTART_MEASURE=1 REAL_ROOT_NAMESPACE=1 RESTART_SESSIONS=60 RESTART_MODE=daemon REAL_ONE_WAY_MS=150 TRACER_TEST_PORT=4450 INFRATERNAL_BIN="$PWD/infraternal" TRACER_DIST="$PWD/apps/tracer/dist" /usr/local/bin/perf-run.sh -- node apps/tracer/real/perf-restart.js ``` Set the two matrix variables to the case being run. Both desktop locked and phone unlocked cases run by default. Return complete METRIC lines and failed assertions; use the established port-scoped network driver for a true network RTT profile. REAL_ONE_WAY_MS is message delay and is labeled as such by the harness. This supplements the earlier three-tab 8192/32768 queue/heap probe; it does not itself qualify typing with that queue held. All performance qualification remains pending; no build-host timings are evidence.
Author
Owner

Pushed 1543f3fb03. Full retained production-browser run on the final production code: 31 passed / 1 failed, the R2 fixture holding the wrong request sequence. The fixture now selects the confirmed membership, checks the split/close prefix while retaining valid move/resize suffixes, and withholds layout calls only (terminal credit/proof traffic continues). Both R2 variants pass 3 consecutive repetitions: 6 passed / 0 failed. Strict real-spec compiler passes. All four new per-tab browser scenarios pass, including phone notice nonoverlap. Earlier focused unit result: 319 passed / 20244 assertions.

The unchanged native streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch now passes its isolated retry: 1 passed, 0 failed, 94 filtered out. No native fix or waiver. Same-recipe baseline static comparison and full scripts/verify fast are running sequentially through the build slot on this exact head. Worktree clean; no deploy.

Outstanding original-session continuity is still a real unmet requirement (not covered by the local generation/notification controls); no response/binding contract received. Performance artifacts and exact relay commands are above; no performance results received, so the 32 MiB encoded bound remains provisional and D259/D267/heap/task budgets are not qualified. Firefox/WebKit/real iPhone PWA normal/private modes are not qualified by Chromium emulation. These must remain explicit handoff blockers even if fast passes.

Pushed 1543f3fb034bd37d5797f9474bf327c7eb8dc217. Full retained production-browser run on the final production code: 31 passed / 1 failed, the R2 fixture holding the wrong request sequence. The fixture now selects the confirmed membership, checks the split/close prefix while retaining valid move/resize suffixes, and withholds layout calls only (terminal credit/proof traffic continues). Both R2 variants pass 3 consecutive repetitions: 6 passed / 0 failed. Strict real-spec compiler passes. All four new per-tab browser scenarios pass, including phone notice nonoverlap. Earlier focused unit result: 319 passed / 20244 assertions. The unchanged native streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch now passes its isolated retry: 1 passed, 0 failed, 94 filtered out. No native fix or waiver. Same-recipe baseline static comparison and full scripts/verify fast are running sequentially through the build slot on this exact head. Worktree clean; no deploy. Outstanding original-session continuity is still a real unmet requirement (not covered by the local generation/notification controls); no response/binding contract received. Performance artifacts and exact relay commands are above; no performance results received, so the 32 MiB encoded bound remains provisional and D259/D267/heap/task budgets are not qualified. Firefox/WebKit/real iPhone PWA normal/private modes are not qualified by Chromium emulation. These must remain explicit handoff blockers even if fast passes.
Author
Owner

Implementation run handoff: layout-per-tab-250, head 1543f3fb034bd37d5797f9474bf327c7eb8dc217, pushed; worktree clean. The approved plan is NOT fully complete. Original-session continuity remains unmet: a suspended tab missing logout notification can still retry under a later login because the current server/handshake exposes no stable original-session binding. Local generation and BroadcastChannel tests do not establish that property. Required perf-VM task/heap/D259/D267 qualification and Firefox/WebKit/real iPhone PWA normal/private qualification are also outstanding. No relay results or session-binding resolution were received. The 32 MiB encoded queue bound remains provisional. Do not treat a green fast gate as proof of those requirements.

Implemented: per-tab RAM intents with immutable same-ID retries and receipt/event confirmation; no private layout/drawing/identity cache writer; read-only legacy import retirement after confirmation; immediate pending status through the shared toast; warm offline retention and cold connection screen; revoke-before-forget logout freeze/failure handling and local callback fences. The shared toast also fences animation callbacks and separates wrapped notices above the mobile key tray. No native source, dependency, manifest, toolchain or static recipe changes; frontend changes are TypeScript plus shared toast CSS. The carried plan is unchanged from 2bfb0544e. Unmerged R3 storage modules were avoided, not claimed as deletions from dev.

Verification:

  • Exact-head scripts/verify fast: exit 0, every Rust row PASS; 563 Bun tests pass, 0 fail (groups 3/2/2/395/105/17/39). Strict real-spec compiler, tracer check and production build pass. Layout/journal/property/privacy/lifecycle tests are included; the focused canvas/privacy run was 319 pass and 20244 assertions.
  • Production Chromium functional matrix: 31/32 passed before the R2 fixture correction; both corrected pipeline/reconnect variants then passed three consecutive repetitions, 6/6. The old fixture withheld terminal credit/proofs and could close the newly split window; it now holds layout calls only and closes a confirmed identity. All four new per-tab scenarios and desktop/phone ink/paper notice geometry pass. Tests expecting durable offline reload were replaced and named in commit messages. Earlier 9/9 targeted production run also passed. These are functional checks, not timing qualification.
  • Static x86_64: 21431472 bytes, delta 0, byte-identical to freshly built base 2fb412d01 using the same recipe. Baseline, preserved head and final gate artifact SHA256 all 159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194. ARM static size 19605896 bytes, unchanged exact cap. Final size proof
  • The earlier unchanged install-test failure passed its isolated retry and the full final run; no waiver or native fix. Earlier failed milestone transcript · Final complete transcript

Production screenshots for owner review (supersede the earlier overlapping captures): desktop ink, desktop paper, phone ink, phone paper. Phone is emulated, not an actual iPhone/PWA qualification. Owner visual judgment remains required.

How to test the new bundle:

  1. Open three signed-in tabs, interrupt one tab's connection, then split or rename there. Its pending notice stays visible and typing continues; other tabs receive only server-confirmed edits.
  2. Reload that unconfirmed tab: its waiting edits are lost. Reopen offline: Connect to load your layout. A warm disconnected tab retains its drawing.
  3. Restore connectivity to confirm, then sign out: failed logout preserves signed-in work; successful revocation tears down local memory. Close/reopen every old bundle/PWA at cutover before claiming zero old writers; this job did not deploy or perform that cutover.

Author checks: reused shared UI, kept wire/schema/reducers/native dependencies unchanged, verified no live layout storage access at 8192/32768 intents with 8195 leftover keys, retained receipt identity/refusal/duplicate/placeholder/import/teardown controls, reviewed privacy and lifecycle gaps explicitly above. No claim that every failure-table requirement is satisfied while authenticated original-session continuity is unresolved.

Cleanup: job CARGO_TARGET_DIR, detached baseline and owned short fixture root removed; own private sccache stopped. Selected build/browser/fixture PIDs are gone. Cleanup. Source worktree and external evidence retained. No deploy; issue left open.

Diff versus 2fb412d01: 580 removed / 1449 added (tests and 171-line plan included). Production frontend alone: 243 removed / 362 added.

Exact-head gate output follows verbatim; command exit status was 0:


==> Repository artifact size gate
repository artifact gate: PASS (41 changed path(s), merge base 2fb412d01dce)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.674s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.086s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [151.63ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [149.39ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [156.19ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [461.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 3s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-shim)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal)
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4.00s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.41s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 24.97s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.15s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 31s)

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.93s
(clippy: 3s)

==> SSH runtime test helper
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.22s
(SSH runtime test helper: 1s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.008s

OK
(real-binary fixture paths: 0s)

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.40s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 25.17s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.40s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.65s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.11s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test a_missing_server_is_not_found_exit_4 ... ok
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_empty_no_color_is_ignored ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok
test json_help_and_version_are_envelopes_too ... ok
test no_compiled_python_is_tracked ... ok
test root_help_fits_80_columns ... ok
test root_help_lists_server_init ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test user_facing_text_never_says_agent_alone ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok
test signal_fixture ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.07s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/replay_size.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/replay_size-012ca64e5a46eaa3)

running 1 test
test replay_fences_report_pre_resize_geometry_across_viewers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.29s

     Running tests/replay_size_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/replay_size_review-6727b43a6052c4c4)

running 1 test
test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.59s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.86s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.62s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/setup_output-702013ba02916bdd)

running 6 tests
test setup_output_keeps_legacy_and_versioned_readers ... ok
test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok
test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok
test setup_token_reads_a_traversable_directory_without_listing_access ... ok
test unreadable_system_service_data_prints_one_sudo_command_line ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.17s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.83s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.29s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.44s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 169 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_geometry_is_frozen_before_queued_resize_and_delayed_output ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 149 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.61s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.58s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 12 tests
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 7.12s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test an_address_that_is_an_ip_never_becomes_a_name ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.28s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.85s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2
ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... 
running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... 
running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.56s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.49s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test restart_recovers_partial_stage_retirement ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test session_restaging_uses_one_compound_command ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 27.98s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.40s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.37s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test cleanup_script_requires_the_shipped_helper_level ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.06s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 727 tests
test auth::account_events::review_revocation_r2::review_r2_aborted_commit_task_preserves_publication_order ... ok
test auth::account_events::review_revocation_r2::review_r2_cancelled_refused_commit_never_publishes ... ok
test auth::account_events::review_revocation_r2::review_r2_panicking_commit_waiter_preserves_publication_order ... ok
test auth::account_events::review_revocation_r2::review_r2_timed_out_commit_waiter_preserves_publication_order ... ok
test auth::account_events::tests::a_closed_cursor_cannot_remove_its_replacement_channel ... ok
test auth::account_events::tests::a_dropped_source_reports_unavailable_instead_of_consuming_a_change ... ok
test auth::account_events::tests::cancellation_preserves_an_unread_generation ... ok
test auth::account_events::tests::cancelled_commit_waiter_still_commits_and_wakes_both_account_sources ... ok
test auth::account_events::tests::coalesced_changes_remain_pending_for_each_affected_account ... ok
test auth::account_events::tests::concurrent_final_drops_remove_the_account_before_receiver_fields_drop ... ok
test auth::account_events::tests::concurrent_registration_and_cleanup_keep_the_existing_generation ... ok
test auth::account_events::tests::last_subscriber_removes_only_its_account ... ok
test auth::account_events::tests::many_accounts_do_not_share_generations_or_retain_inactive_entries ... ok
test auth::account_events::tests::publication_wakes_outside_the_registry_lock ... ok
test auth::account_events::tests::refused_transaction_commit_wakes_neither_account_source ... ok
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::account_logout_does_not_notify_another_account ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::logout_commit::logout_commit_failure_does_not_publish_revocation_or_report_success ... ok
test auth::tests::logout_commit::logout_publication_measurement ... ignored, measurement only; run on a perf VM under perf-run.sh
test auth::tests::logout_commit::review_account_scope_committed_logout_keeps_wake_when_waiter_is_cancelled ... ok
test auth::tests::logout_commit::review_account_scope_statement_rollback_is_quiet_and_later_commit_wakes_once ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::per_account_revocation::account_logout_wakes_only_its_16_sockets_among_256 ... ok
test auth::tests::socket_tests::per_account_revocation::account_recovery_wakes_only_its_16_sockets_among_256 ... ok
test auth::tests::socket_tests::per_account_revocation::another_live_session_on_the_affected_account_keeps_its_proof_lease ... ok
test auth::tests::socket_tests::per_account_revocation::coalesced_session_logout_cannot_hide_an_earlier_revoked_proof_lease ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_account_scope::account_deletion_retires_open_sockets_without_affecting_other_accounts ... ok
test auth::tests::socket_tests::review_account_scope::lagged_cursors_survive_65536_overwrites_and_unknown_scope_wakes_every_account ... ok
test auth::tests::socket_tests::review_account_scope::lost_recovery_source_closes_with_1013_without_another_authority_read ... ok
test auth::tests::socket_tests::review_account_scope::lost_revocation_source_closes_with_1013_without_another_authority_read ... ok
test auth::tests::socket_tests::review_account_scope::reassigned_session_cannot_authorize_work_for_its_former_account ... ok
test auth::tests::socket_tests::review_account_scope::review_r2_lost_recovery_source_reports_unavailable_or_reads_authority ... ok
test auth::tests::socket_tests::review_account_scope::simultaneous_recovery_a_and_logout_b_preserve_both_scopes ... ok
test auth::tests::socket_tests::review_account_scope::two_accounts_revoked_before_either_cursor_runs_both_refuse ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::bootstrap_logout_before_subscription_closes_idle_upgrade ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::review_account_scope_logout_after_subscription_retires_idle_bootstrap ... ok
test bootstrap_api::tests::review_account_scope_lost_bootstrap_source_retires_instead_of_spinning ... ok
test bootstrap_api::tests::review_r2_restored_bootstrap_source_still_reports_unavailable ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::setup_logout_before_subscription_closes_idle_upgrade ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test bootstrap_api::tests::setup_status_tests::review_account_scope_lost_setup_source_reports_unavailable_and_retires ... ok
test bootstrap_api::tests::setup_status_tests::review_r2_restored_setup_source_still_reports_unavailable ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notices_preserve_optional_geometry_through_server ... ok
test embedded::regressions::replay_geometry_rejects_values_outside_u16 ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test websocket::probe_authority::review_r2_restore::review_r2_revoked_lease_with_restored_source_never_polls_work ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok

test result: ok. 674 passed; 0 failed; 53 ignored; 0 measured; 0 filtered out; finished in 397.48s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test independent_loads_and_base_edit_repair_exactly_once ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retarget_checks_account_ownership_even_after_close ... ok
test retired_reference_does_not_block_an_unrelated_edit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test imported_name_respects_the_browser_utf16_bound ... ok
test text_uses_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test healthy_real_socket_survives_a_150ms_server_stall ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::fresh_exec_closes_dumpability_before_private_startup ... 
running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

ok
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 36.11s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_status-7910dde34bdac077)

running 14 tests
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::nothing_installed_says_so ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 782s)

==> SSH inode reuse fixture
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.12s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... SSH test state root exceeds 26 bytes; using /home/agent/.cache/31d801
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.19s
(SSH inode reuse fixture: 0s)

==> shim process-per-user
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.06s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... 
running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.10s

ok
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... 
running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s

ok
test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok
test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... 
running 1 test
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok
test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok
test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... 
running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 133.58s

(shim process-per-user: 134s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
   Compiling cfg-if v1.0.5
   Compiling libc v0.2.190
   Compiling pin-project-lite v0.2.17
   Compiling serde_core v1.0.229
   Compiling bytes v1.12.1
   Compiling serde v1.0.229
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling futures-core v0.3.34
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling tracing-core v0.1.36
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling mio v1.2.4
   Compiling smallvec v1.16.2
   Compiling signal-hook-registry v1.4.8
   Compiling futures-sink v0.3.34
   Compiling yoke v0.8.3
   Compiling tracing v0.1.44
   Compiling slab v0.4.12
   Compiling subtle v2.6.1
   Compiling generic-array v0.14.7
   Compiling tokio v1.53.3
   Compiling zerovec v0.11.8
   Compiling typenum v1.20.1
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling num-traits v0.2.19
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_locale_core v2.3.0
   Compiling icu_collections v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling percent-encoding v2.3.2
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling equivalent v1.0.2
   Compiling icu_provider v2.3.1
   Compiling digest v0.10.7
   Compiling thiserror v2.0.21
   Compiling hashbrown v0.17.1
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling futures-task v0.3.34
   Compiling form_urlencoded v1.2.2
   Compiling indexmap v2.14.2
   Compiling scopeguard v1.2.0
   Compiling futures-util v0.3.34
   Compiling zmij v1.0.23
   Compiling serde_json v1.0.151
   Compiling parking_lot_core v0.9.12
   Compiling futures-channel v0.3.34
   Compiling lock_api v0.4.14
   Compiling idna_adapter v1.2.2
   Compiling openssl-sys v0.9.117
   Compiling crossbeam-utils v0.8.23
   Compiling idna v1.1.0
   Compiling foldhash v0.1.5
   Compiling bitflags v2.13.2
   Compiling rand_core v0.10.1
   Compiling allocator-api2 v0.2.21
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling hashbrown v0.15.5
   Compiling either v1.18.0
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling base64 v0.22.1
   Compiling event-listener v5.4.2
   Compiling zerocopy v0.8.60
   Compiling crc v3.4.0
   Compiling hashlink v0.10.0
   Compiling crossbeam-queue v0.3.14
   Compiling futures-intrusive v0.5.0
   Compiling getrandom v0.4.3
   Compiling spin v0.9.9
   Compiling sha2 v0.10.9
   Compiling tokio-stream v0.1.19
   Compiling libsqlite3-sys v0.30.1
   Compiling getrandom v0.2.17
   Compiling ryu v1.0.23
   Compiling sqlx-core v0.8.6
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling foreign-types-shared v0.1.1
   Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-plugin-api)
   Compiling http v1.5.0
   Compiling foreign-types v0.3.2
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling ring v0.17.14
   Compiling nix v0.30.1
   Compiling uuid v1.27.0
   Compiling zeroize v1.9.0
   Compiling arrayvec v0.7.8
   Compiling ppv-lite86 v0.2.21
   Compiling sqlx-sqlite v0.8.6
   Compiling minimal-lexical v0.2.1
   Compiling untrusted v0.9.0
   Compiling utf8parse v0.2.2
   Compiling nom v7.1.3
   Compiling anstyle-parse v1.0.0
   Compiling sqlx v0.8.6
   Compiling httparse v1.10.1
   Compiling thiserror v1.0.69
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling time-core v0.1.9
   Compiling anstyle-query v1.1.5
   Compiling deranged v0.5.8
   Compiling tinyvec v1.13.3
   Compiling powerfmt v0.2.1
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle v1.0.14
   Compiling cpufeatures v0.3.1
   Compiling num-conv v0.2.2
   Compiling colorchoice v1.0.5
   Compiling rustls-webpki v0.103.16
   Compiling anstream v1.0.0
   Compiling chacha20 v0.10.2
   Compiling time v0.3.55
   Compiling rustls v0.23.46
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling tokio-util v0.7.19
   Compiling tower-service v0.3.3
   Compiling clap_lex v1.1.1
   Compiling data-encoding v2.11.1
   Compiling strsim v0.11.1
   Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-protocol)
   Compiling rand v0.9.5
   Compiling asn1-rs v0.6.2
   Compiling quinn-udp v0.5.16
   Compiling rand v0.10.3
   Compiling clap_builder v4.6.7
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling num-integer v0.1.47
   Compiling lru-slab v0.1.3
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling atomic-waker v1.1.2
   Compiling fnv v1.0.7
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling rustc-hash v2.1.3
   Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-shim)
   Compiling h2 v0.4.19
   Compiling want v0.3.2
   Compiling base64urlsafedata v0.5.5
   Compiling quinn-proto v0.11.19
   Compiling oid-registry v0.7.1
   Compiling num-bigint v0.4.8
   Compiling clap v4.6.7
   Compiling quinn v0.11.12
   Compiling vte v0.15.0
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling der-parser v9.0.0
   Compiling http-body-util v0.1.5
   Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-mesh)
   Compiling half v2.7.1
   Compiling hyper v1.11.1
   Compiling sha1 v0.10.7
   Compiling sync_wrapper v1.0.2
   Compiling regex-syntax v0.8.11
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling fs-err v3.3.2
   Compiling hyper-util v0.1.21
   Compiling x509-parser v0.16.0
   Compiling mime_guess v2.0.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling regex-automata v0.4.18
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/host-facts)
   Compiling hex-conservative v0.2.3
   Compiling hex v0.4.3
   Compiling base64ct v1.8.3
   Compiling unicase v2.10.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling matchers v0.2.0
   Compiling password-hash v0.5.0
   Compiling tokio-tungstenite v0.29.0
   Compiling arc-swap v1.9.2
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling http-range-header v0.4.2
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling bip39 v2.2.2
   Compiling argon2 v0.5.3
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling axum v0.8.9
   Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-server)
   Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/canvas)
   Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/release)
   Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal)
   Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-status)
   Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/relay)
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/remote)
   Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-agent)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/ssh)
    Finished `release` profile [optimized] target(s) in 2m 47s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/layout-per-tab-250/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21431472 bytes; cap: 21431472 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 0.25s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/layout-per-tab-250/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19605896 bytes; cap: 19605896 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21431472-byte cap PASS; 21431473 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19605896-byte cap PASS; 19605897 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [28.59ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [32.39ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [69.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 169s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [27.24ms]
(pass) Rust and cached target compiles receive every environment remap [268.34ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [307.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler
Saved lockfile

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [10.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [14.18ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [11.83ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [5424.66ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.56ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.04ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.09ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.20ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.05ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.15ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.23ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [0.27ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.05ms]
(pass) output that arrives later clears the note [0.04ms]
(pass) an idle shell reattached at the same size is correctly silent and never shows the note [0.03ms]
(pass) a shell that stays silent after the attach resized it shows the note [0.03ms]
(pass) a resized program that repaints never shows the note, not for a frame [0.03ms]
(pass) one changed dimension is a resize [0.02ms]
(pass) output after the note, on a resized reattach, clears it [0.03ms]
(pass) a server that reports no size keeps the wait [0.02ms]
(pass) the replay fence reports a size only when both fields are usable [0.13ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.07ms]
(pass) the wait grows with the round trip and stays bounded [0.05ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [0.59ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [1.38ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.06ms]
(pass) synchronized terminal output > RIS clears an active mode [0.04ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [0.18ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.28ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.22ms]
(pass) a queued fit stops when the terminal becomes suspended [0.02ms]
(pass) a queued fit stops when the terminal becomes frozen [0.01ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [0.60ms]
(pass) the last-account pointer of another account stays [0.08ms]
(pass) an unknown account clears every account's data and keeps preferences [0.05ms]
(pass) account notifications cannot write before or after disposal [0.10ms]
(pass) legacy generation sweep is account scoped and reports refused erasure [0.13ms]
(pass) R2: 21 legacy generations survive refused cleanup and disappear only after a successful retry [0.42ms]

src/offline-drawing.test.ts:
(pass) warming the shell never accesses private browser storage [0.10ms]

src/session-notifications.test.ts:
(pass) notifications validate account/lifetime messages and dispose callbacks [0.40ms]
(pass) missing or failed notification channels do not prevent confirmed local teardown [0.13ms]

src/sign-out.test.ts:
(pass) a late successful logout cannot forget or announce revocation for a newer signed-in screen [0.67ms]
(pass) a late failed logout does not thaw the replacement screen [0.31ms]
(pass) new screen logout has its own request and old completion cannot clear its deduplication [0.31ms]
(pass) default lifetime still deduplicates one failed logout and restores its screen [0.16ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.14ms]
(pass) repeating the front item changes nothing [0.03ms]
(pass) the list is capped, so the oldest items fall off [0.03ms]
(pass) top skips items that are no longer live, without losing them [0.04ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.18ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.06ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.46ms]
(pass) routine connection states stay out of the toast [0.05ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.06ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.14ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [672.69ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.30ms]
(pass) a deferred new:below selection retains its original window [0.02ms]
(pass) a deferred close selection retains its original window [0.02ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.65ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.11ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.23ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.15ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.15ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.11ms]
(pass) before facts arrive the host's platform names the header [0.05ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.05ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.60ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [10.49ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.24ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [1.34ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [0.78ms]
(pass) a recovered graph owns its node positions independently [0.09ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.10ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.05ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.50ms]
(pass) without `access` (today's server) the person may view and may not edit [0.25ms]
(pass) fields the server does not send are absent, never invented [0.11ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.04ms]
(pass) anything that is not a list is refused, whole [1.80ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.06ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.20ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.07ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.07ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [0.87ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.20ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.25ms]
(pass) a pushed recovery cancels the scheduled retry [0.23ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.26ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.25ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.08ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.42ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.33ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.22ms]
(pass) initial Mesh list handles closed transport [0.16ms]
(pass) initial Mesh list handles liveness deadline [0.04ms]
(pass) initial Mesh list handles unreadable JSON [0.05ms]
(pass) initial Mesh list handles unavailable storage [0.14ms]
(pass) initial Mesh list handles forbidden action [0.05ms]
(pass) initial Mesh list handles invalid stored host [0.04ms]
(pass) Mesh watch withdrawal handles forbidden [0.10ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.04ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.02ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.18ms]
(pass) the layout is deterministic and does not depend on input order [1.91ms]
(pass) no two cards overlap, and every card lies inside the graph [4.20ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.39ms]
(pass) a pinned node stays where it was put and the others do not move [1.42ms]
(pass) a pin beyond the sheet grows the graph [0.14ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.14ms]
(pass) 1,000 nodes lay out in a few milliseconds [8.08ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.48ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.22ms]
(pass) a view taller than the viewport is scaled down so it fits [0.04ms]
(pass) nearestStop picks the stop whose centre is closest [0.19ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.21ms]
(pass) a small graph keeps one stop per node column [0.14ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.14ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.14ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.78ms]
(pass) closing the new half gives the layout back exactly, in the model [1.24ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.38ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.25ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.57ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.62ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.23ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.32ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.13ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.16ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [42.85ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.59ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.17ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.76ms]
(pass) a chain of neighbours is pushed in turn [0.09ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.31ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.39ms]
(pass) snapping rounds to whole cells [0.05ms]
(pass) reach follows grants through tags and keeps the relay [0.14ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.06ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.09ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.08ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces in-memory session rows without rewriting legacy storage [0.98ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.18ms]
(pass) inventory keeps a remote session per tab and refuses a cross-host attach [0.25ms]
(pass) superseded status snapshots release records for sessions this device never opened [0.66ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.08ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.07ms]
(pass) a final Close before the first positive census never revives a new ID [0.10ms]
(pass) a later absence retires a new ID after its first positive census [0.08ms]
(pass) another host's census cannot clear a new shell's census fence [0.04ms]
(pass) another host's close cannot clear a new shell's census fence
(pass) shared membership marks windows open without any local attachment [0.23ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.69ms]
(pass) a detected operating system supplies the live popover mark [0.70ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.00ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.15ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.18ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.07ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.10ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.19ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.15ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.05ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.93ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.16ms]
(pass) a removal in another browser withdraws the host [0.18ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.16ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.31ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.30ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.11ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.08ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [12.59ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [9.96ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.01ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.33ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.26ms]
(pass) oversized refusal JSON is ignored before parsing [0.14ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.52ms]
(pass) pointerdown supersedes every older focus intent [0.03ms]
(pass) keydown supersedes every older focus intent [0.02ms]
(pass) input supersedes every older focus intent [0.02ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [27.62ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.73ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [0.78ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.89ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.48ms]
(pass) dispose cancels late callbacks after sign-out [0.30ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.87ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.71ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [0.31ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable without rewriting its source [0.32ms]
(pass) ready edits share one network round trip with a bounded in-flight window [0.70ms]
(pass) the optimistic semantic projection paints before any server receipt [0.41ms]
(pass) a no-op drawing capture does not trigger another paint [0.22ms]
(pass) review: a refused structural edit cannot strand later valid edits [0.51ms]
(pass) a definitive refusal paints rollback in memory and never retries after reconnect [0.51ms]
(pass) a stale refusal cannot discard a new-connection retry [0.28ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.13ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [0.27ms]
(pass) legacy import retires only after receipt and canonical coverage, receipt first=false [0.30ms]
(pass) legacy import retires only after receipt and canonical coverage, receipt first=true [0.08ms]
(pass) refused import and refused cleanup preserve their legacy source until confirmed removal succeeds [0.41ms]
(pass) reference completion during failed logout is retained without sending until edits resume [0.55ms]

src/canvas/model/lifetime.test.ts:
(pass) logout freezes the initiating account; failure preserves its queue; success forgets only that lifetime [0.13ms]
(pass) dropping a session clears canonical drawing, placeholders and pending callbacks permanently [0.22ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.16ms]

src/canvas/model/per-tab.test.ts:
(pass) Hunt 1 / R1 adoption: online peers cannot overwrite or retire a live offline queue [0.90ms]
(pass) R1 failed replacement / R2 unreadable source / 33+33 legacy columns: sources never retire without import confirmation [0.52ms]
(pass) R2 full-history flush / R3 refused cleanup: 8192 queued intents do zero storage work [311.45ms]
(pass) R2 full-history flush / R3 refused cleanup: 32768 queued intents do zero storage work [1310.16ms]
(pass) R2 concurrent first tabs / failed marker / R3 missing locks: no lifetime creation or lock fallback exists [0.88ms]
(pass) R2 sign-out between check/write / R3 delayed startup: teardown invalidates old callbacks before later login [0.97ms]
(pass) R2 completed capture before 300 ms: unconfirmed tab loss is explicit; confirmed state restores from server [0.53ms]
(pass) R2 100 snapshots and 50 ms do not establish a receipt identity or expire uncertainty [62.51ms]
(pass) absent, throwing and recovered storage cannot change live edit acceptance [1.46ms]
(pass) refused individual intents leave independent tabs and later edits live [0.33ms]
(pass) R1 stale unresolved duplicate cannot suppress a completed same-tab birth [0.91ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [0.46ms]
(pass) right split of a stack preserves the upper band [0.36ms]
(pass) reorder uses stable neighbours and emits no document [0.54ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.66ms]
(pass) a three-window reorder sends one semantic move [0.26ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.40ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.40ms]
(pass) a narrow right split widens first so both halves remain valid [0.42ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.50ms]

src/canvas/model/queue-budget.test.ts:
(pass) adjacent same-field unsent edits coalesce; sent requests retain identical identity and input [0.41ms]
(pass) byte backpressure reports refusal before changing projection or silently dropping older work [0.20ms]
(pass) rejected placeholder cancellation preserves the accepted birth and unresolved dependency [0.30ms]
(pass) completed reference size counts toward backpressure without mutating a refused completion [0.31ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.34ms]
(pass) a document survives JSON and rebuilds the same columns [0.35ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.09ms]
(pass) parseDocument rejects anything that is not a document of this format [0.15ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.12ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.23ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.23ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.16ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.07ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.04ms]
(pass) a captured graph document is independent of the next pin drag [0.03ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [0.59ms]
(pass) inventory includes shared memberships that this device cannot render [0.56ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.18ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.17ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [2432.56ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1526.90ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [2.65ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [1.16ms]

src/canvas/model/journal-confirmation.test.ts:
(pass) hunt 2: uncertain sent edit stays hidden over a newer snapshot until its receipt [0.66ms]
(pass) R1 held notification: a receipt above canonical explicitly reveals the overlay [0.26ms]
(pass) R2 receiptless identity survives 100 matching snapshots without silent confirmation [0.55ms]
(pass) R1 covered receipt is pruned before projecting canonical revision 3 [0.19ms]
(pass) duplicate event then late refusal cannot discard independent work [0.17ms]

src/canvas/model/server-store-p3-review.test.ts:
(pass) review: two successive gaps coalesce while each snapshot is outstanding [1.01ms]
(pass) review: a snapshot arriving after newer deltas never rolls back canonical state [0.12ms]
(pass) review: outage edits wait for snapshot then send each identity once in order [0.63ms]
(pass) review: a 3 s RTT fresh route stays quiet until its complete recovery budget [0.39ms]
(pass) review: changed RTT reschedules the notice and successful recovery cancels future notices [0.34ms]
(pass) review: recovery before the budget remains quiet across repeated drops and disposal frees timers [2.01ms]
(pass) review: an edit first made while offline eventually emits the calm notice [0.38ms]
(pass) review: a first-connect outage with no RTT sample cannot hide pending edits forever [0.38ms]
(pass) hunt 4: slow snapshots own one watchdog; bounded retries pause offline and disposal cancels them [0.27ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through same-tab reference completion [0.55ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.90ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.21ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.57ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.68ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.27ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [51.52ms]
(pass) review reconnect budget survives sockets that open then close without events [46.07ms]
(pass) review explicit retry resumes after the setup feed stops [46.66ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.50ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.09ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.16ms]
(pass) review listed inventory name plus port retains its resolved address [0.19ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.06ms]
(pass) parseSetupEvent > drops anything malformed [0.04ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.03ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.10ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.06ms]
(pass) foldSetup > ready done completes the run [0.03ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.08ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.08ms]
(pass) review malformed setup fields are dropped without coercion errors [0.09ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.08ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.20ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.03ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.86ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.23ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.75ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.15ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.30ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.42ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.36ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.18ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [1.09ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.30ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.11ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.08ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.15ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.18ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.07ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.08ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.11ms]
(pass) guideFor > each failure kind names its fix [0.06ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.05ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.15ms]
(pass) parseTarget > reads an ssh:// address [0.05ms]
(pass) parseTarget > refuses garbage around an ssh command [0.06ms]
(pass) parseTarget > refuses what cannot name a host [0.03ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.33ms]
(pass) parseSshConfig > recognises config text [0.07ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.07ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.06ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.08ms]
(pass) only a completed canonical host identity becomes terminal authority [0.11ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms]
(pass) install diagnostics name the failed step and public host error [0.05ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.18ms]
(pass) release payload verification names the architecture step and plain reason [0.02ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.06ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.05ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.11ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.05ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.46ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.30ms]
(pass) ready CA begins the requested installation mode without another prompt [0.09ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.20ms]
(pass) a typed root login requires explicit consent before any installation [0.24ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.42ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.43ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.63ms]
(pass) a chunk that both sides use stays critical [0.19ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.14ms]
(pass) automatic canonical painting loads after the first canvas draw [0.18ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.05ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.75ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.34ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [7.77ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [18.23ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.64ms]
(pass) abandoned word acknowledgement uploads nothing [1.91ms]
(pass) settled acknowledgement cannot upload later (dismissed) [1.48ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [1.51ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.08ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.81ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.11ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.01ms]
(pass) malformed or excessive remaining wait -1 is denied [1.17ms]
(pass) malformed or excessive remaining wait 0.5 is denied [0.87ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.35ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.15ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.04ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.17ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.22ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.06ms]
(pass) the viewer announces the link-doubt capability in its Hello [1.72ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.12ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.02ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.19ms]
(pass) routine detach and connection rotation reasons stay neutral [0.01ms]
(pass) a stream close that reattaches never says the terminal ended [0.13ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.06ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.06ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.26ms]
(pass) counted closes are reported when their window ends, without another close [0.04ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [0.93ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.33ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.62ms]
(pass) the online event retries by itself [5.34ms]

 395 pass
 0 fail
 22197 expect() calls
Ran 395 tests across 66 files. [12.38s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [11.66ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.03ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.25ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.94ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [4.27ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [1.22ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.18ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [1.10ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [0.84ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [0.73ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [0.49ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [0.63ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [0.64ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.46ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.37ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.42ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [0.49ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [1.99ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.18ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.00ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [0.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [0.79ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [0.90ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.89ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.18ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [0.82ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [7.72ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.34ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.26ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [0.91ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.80ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [0.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [2.44ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [0.80ms]
(pass) retirement gives a queued correlated pong one task turn [0.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [1.00ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.62ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.61ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [0.68ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.67ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.69ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [0.85ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [0.67ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [0.71ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [1.05ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [1.24ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [1.16ms]
(pass) a pending confirmation is reset by reconnect [1.05ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [1.02ms]
(pass) a pending confirmation is reset by dispose [0.89ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [1.75ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.74ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.19ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [0.75ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [39.38ms]
(pass) visibility notices require both peers to support them: false [0.35ms]
(pass) visibility notices require both peers to support them: true [0.21ms]
(pass) hiding a page cancels a retry scheduled while it was visible [0.49ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.08ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.83ms]
(pass) a layout subscription starts the connection before any terminal exists [0.23ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [0.68ms]
(pass) resync reopens a feature subscription with the same server ID [0.18ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [8.52ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.26ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.34ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.44ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.55ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.17ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.05ms]
(pass) query replies negotiate independently with Hello caps 4
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [7.17ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.03ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [0.55ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [0.49ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.45ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.44ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [0.41ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [7.49ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [1.08ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.46ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.20ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.26ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.13ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.14ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [2.19ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.24ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.48ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.60ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [0.85ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.15ms]
(pass) review: retained input and consent are local to their terminal window [0.13ms]
(pass) review: selecting a different session removes saved typing and its action [0.17ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.18ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.40ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [1.75ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [0.80ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.67ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [198.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.42ms]
(pass) all requested query families have identities [0.09ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.29ms]
(pass) oversized OSC retains BEL termination before a later query [0.10ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [182.27ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [1.74ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [0.28ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.23ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [5.79ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [33.96ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.17ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.63ms]
(pass) nested writes and memory growth cannot replace borrowed input [0.34ms]
(pass) allocation refusal never writes or frees unowned memory [1.42ms]
(pass) empty scopes accept no input and reject later writer use [0.27ms]
(pass) input views of native memory survive allocation-driven memory growth [0.20ms]
(pass) throwing callbacks release exactly their owned input allocation [0.17ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [251.00ms]
$ bun run build.ts
built chunk-23as0kst.js, chunk-5xwdr39w.js, chunk-80np2ghw.js, chunk-tw86azhm.js, chunk-t62akxxk.js, chunk-szns5x6a.js, chunk-ytz2qvxs.js, chunk-na49xj9e.js, chunk-p6dfdmqz.js, chunk-tj8daj0z.js, chunk-gxvqf3b8.js, chunk-warvf74m.js, chunk-fx9rjddg.js, chunk-kv1b7eg4.js, chunk-t5736zsg.js, chunk-d537z935.js, chunk-t1vhpenw.js, chunk-txzfc4ar.js, main.js, chunk-3s71etxc.js, chunk-vxhjgegw.js, chunk-w8xtw9td.js, chunk-5vtmph0b.js, chunk-b27vn5bm.js, chunk-63egtnaq.js, chunk-mqfdvw2d.js, chunk-hywrqj5q.js, chunk-mxyxwknh.js, chunk-ntfpvb27.js, chunk-t7wpy203.js, chunk-c76h7v56.js, chunk-466cm39d.js, chunk-r4nqx4zq.js, chunk-xcd8jkt6.js, chunk-axbkkqp1.js, chunk-y0nzyzrn.js, chunk-qxwfp64q.js, chunk-2cm8fz05.js, chunk-x9r2hxvt.js, chunk-qkj03gxj.js, chunk-jtqf0t7y.js, chunk-jgq66y52.js, chunk-2s6j7tq3.js, chunk-x4c3pzks.js, chunk-y8j5e0s0.js, chunk-r7ams2xa.js, chunk-ckejx7jz.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-aypf0b87.js, chunk-vf6dy6k6.js, chunk-jx46157v.js, chunk-8pcd9x78.js, chunk-md155x69.js, chunk-f7rrfen3.js, chunk-pgpz5w9m.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-p54j82fj.js, chunk-xmrgqem7.js, chunk-ff3nvh2r.js, chunk-0qmaxw8n.js
onDemand chunk-vf6dy6k6.js: identity=6983 gzip=3102 brotli=2812 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
critical chunk-kv1b7eg4.js: identity=6075 gzip=2538 brotli=2232 bytes
onDemand chunk-y8j5e0s0.js: identity=5359 gzip=2582 brotli=2301 bytes
critical chunk-b27vn5bm.js: identity=2161 gzip=1059 brotli=905 bytes
critical chunk-pgpz5w9m.js: identity=43020 gzip=14711 brotli=13181 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-5xwdr39w.js: identity=191 gzip=169 brotli=127 bytes
onDemand chunk-466cm39d.js: identity=14598 gzip=5444 brotli=4899 bytes
critical chunk-23as0kst.js: identity=34792 gzip=10163 brotli=9116 bytes
onDemand chunk-p6dfdmqz.js: identity=3891 gzip=1735 brotli=1504 bytes
critical chunk-5vtmph0b.js: identity=1776 gzip=855 brotli=693 bytes
onDemand chunk-2cm8fz05.js: identity=6148 gzip=2781 brotli=2513 bytes
onDemand chunk-0qmaxw8n.js: identity=1063 gzip=649 brotli=516 bytes
deferred chunk-t62akxxk.js: identity=38188 gzip=13892 brotli=12425 bytes
critical chunk-63egtnaq.js: identity=1188 gzip=691 brotli=582 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=558 brotli=486 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes
onDemand chunk-x9r2hxvt.js: identity=2824 gzip=1386 brotli=1191 bytes
critical chunk-t5736zsg.js: identity=17631 gzip=6249 brotli=5563 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-80np2ghw.js: identity=6503 gzip=2411 brotli=2148 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-mqfdvw2d.js: identity=2557 gzip=1178 brotli=1006 bytes
critical chunk-tj8daj0z.js: identity=707 gzip=366 brotli=305 bytes
critical chunk-t1vhpenw.js: identity=2529 gzip=1020 brotli=889 bytes
onDemand chunk-xcd8jkt6.js: identity=1026 gzip=623 brotli=498 bytes
onDemand chunk-2s6j7tq3.js: identity=540 gzip=354 brotli=320 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
deferred chunk-t7wpy203.js: identity=127057 gzip=42662 brotli=37412 bytes
critical chunk-txzfc4ar.js: identity=386 gzip=236 brotli=195 bytes
onDemand chunk-x4c3pzks.js: identity=11562 gzip=4695 brotli=4279 bytes
onDemand chunk-y0nzyzrn.js: identity=10904 gzip=4427 brotli=4030 bytes
onDemand chunk-aypf0b87.js: identity=49320 gzip=15450 brotli=13785 bytes
onDemand chunk-ckejx7jz.js: identity=7662 gzip=3398 brotli=2968 bytes
critical chunk-vxhjgegw.js: identity=1106 gzip=665 brotli=604 bytes
onDemand chunk-md155x69.js: identity=33394 gzip=12804 brotli=11521 bytes
critical chunk-f7rrfen3.js: identity=199 gzip=160 brotli=139 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-mxyxwknh.js: identity=2007 gzip=1005 brotli=858 bytes
critical chunk-xmrgqem7.js: identity=9907 gzip=4060 brotli=3496 bytes
onDemand chunk-warvf74m.js: identity=228 gzip=179 brotli=159 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
onDemand chunk-qkj03gxj.js: identity=2522 gzip=1133 brotli=964 bytes
onDemand chunk-r4nqx4zq.js: identity=11126 gzip=4260 brotli=3884 bytes
onDemand chunk-jtqf0t7y.js: identity=1170 gzip=705 brotli=590 bytes
critical chunk-d537z935.js: identity=12197 gzip=4853 brotli=4312 bytes
onDemand chunk-tw86azhm.js: identity=5812 gzip=2378 brotli=2144 bytes
onDemand chunk-p54j82fj.js: identity=9158 gzip=3337 brotli=2894 bytes
onDemand chunk-r7ams2xa.js: identity=4696 gzip=1953 brotli=1723 bytes
onDemand chunk-fx9rjddg.js: identity=2420 gzip=1196 brotli=1075 bytes
onDemand chunk-jgq66y52.js: identity=1649 gzip=775 brotli=675 bytes
onDemand chunk-8pcd9x78.js: identity=6744 gzip=3166 brotli=2879 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=104505 gzip=38495 brotli=33234 bytes
critical chunk-jx46157v.js: identity=162 gzip=150 brotli=145 bytes
onDemand chunk-na49xj9e.js: identity=2108 gzip=1038 brotli=870 bytes
critical chunk-qxwfp64q.js: identity=729523 gzip=210463 brotli=171090 bytes
onDemand chunk-ytz2qvxs.js: identity=6265 gzip=2100 brotli=1862 bytes
deferred chunk-ntfpvb27.js: identity=1537 gzip=798 brotli=721 bytes
critical chunk-w8xtw9td.js: identity=8377 gzip=3575 brotli=3187 bytes
critical chunk-szns5x6a.js: identity=5890 gzip=2462 brotli=2140 bytes
critical chunk-3s71etxc.js: identity=5448 gzip=2606 brotli=2374 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
onDemand chunk-hywrqj5q.js: identity=4594 gzip=2012 brotli=1787 bytes
JavaScript transfer, critical: identity=989432 gzip=306638/307200 brotli=255471/256000 bytes
JavaScript transfer, deferred: identity=168122 gzip=58034/61440 brotli=51149/55296 bytes
JavaScript transfer, onDemand: identity=231921 gzip=91888/20480 brotli=81908/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-aypf0b87.js: gzip=15450/20480 brotli=13785/18432 bytes (class total gzip=91888 brotli=81908, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.34ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.41ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.17ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.11ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.10ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.15ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.13ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.14ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.01ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms]
(pass) split mux header preserves trailing Close [0.23ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.75ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.08ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.61ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.80ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.64ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.37ms]
(pass) superseded failure preserves a newer pending refresh [2.53ms]

src/stream.test.ts:
stream differential: 155 streams, 16716 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4237.74ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [5.71ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.07ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [3.76ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.13ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.33ms]
(pass) review continuation stops after forbidden [1.15ms]
(pass) review continuation stops after superseded [1.12ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.16ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.09ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.10ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.27ms]
(pass) watch never publishes a partial page; withdrawn=true [1.14ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.27ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.18ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.38ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.51ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.12ms]

 39 pass
 0 fail
 50325 expect() calls
Ran 39 tests across 10 files. [4.31s]

Implementation run handoff: `layout-per-tab-250`, head `1543f3fb034bd37d5797f9474bf327c7eb8dc217`, pushed; worktree clean. **The approved plan is NOT fully complete.** Original-session continuity remains unmet: a suspended tab missing logout notification can still retry under a later login because the current server/handshake exposes no stable original-session binding. Local generation and BroadcastChannel tests do not establish that property. Required perf-VM task/heap/D259/D267 qualification and Firefox/WebKit/real iPhone PWA normal/private qualification are also outstanding. No relay results or session-binding resolution were received. The 32 MiB encoded queue bound remains provisional. Do not treat a green fast gate as proof of those requirements. Implemented: per-tab RAM intents with immutable same-ID retries and receipt/event confirmation; no private layout/drawing/identity cache writer; read-only legacy import retirement after confirmation; immediate pending status through the shared toast; warm offline retention and cold connection screen; revoke-before-forget logout freeze/failure handling and local callback fences. The shared toast also fences animation callbacks and separates wrapped notices above the mobile key tray. No native source, dependency, manifest, toolchain or static recipe changes; frontend changes are TypeScript plus shared toast CSS. The carried plan is unchanged from 2bfb0544e. Unmerged R3 storage modules were avoided, not claimed as deletions from dev. Verification: - Exact-head `scripts/verify fast`: **exit 0**, every Rust row PASS; 563 Bun tests pass, 0 fail (groups 3/2/2/395/105/17/39). Strict real-spec compiler, tracer check and production build pass. Layout/journal/property/privacy/lifecycle tests are included; the focused canvas/privacy run was 319 pass and 20244 assertions. - Production Chromium functional matrix: 31/32 passed before the R2 fixture correction; both corrected pipeline/reconnect variants then passed three consecutive repetitions, 6/6. The old fixture withheld terminal credit/proofs and could close the newly split window; it now holds layout calls only and closes a confirmed identity. All four new per-tab scenarios and desktop/phone ink/paper notice geometry pass. Tests expecting durable offline reload were replaced and named in commit messages. Earlier 9/9 targeted production run also passed. These are functional checks, not timing qualification. - Static x86_64: **21431472 bytes, delta 0, byte-identical** to freshly built base 2fb412d01 using the same recipe. Baseline, preserved head and final gate artifact SHA256 all `159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194`. ARM static size **19605896 bytes**, unchanged exact cap. [Final size proof](https://git.kayg.org/attachments/d72e43f3-ab1a-49ab-8d54-8244fd65a34d) - The earlier unchanged install-test failure passed its isolated retry and the full final run; no waiver or native fix. [Earlier failed milestone transcript](https://git.kayg.org/attachments/6b764f65-766c-45e1-9fb2-e5e992b6de0b) · [Final complete transcript](https://git.kayg.org/attachments/36d0a0ae-86af-429b-9a35-1bd69d5bb3ed) Production screenshots for owner review (supersede the earlier overlapping captures): [desktop ink](https://git.kayg.org/attachments/4e4525bc-d2d5-4e64-a2bc-a69133b9e540), [desktop paper](https://git.kayg.org/attachments/a8c65736-0d94-4ad7-99c2-23713d04ee91), [phone ink](https://git.kayg.org/attachments/8dd375f1-211e-4fad-ae35-8e021e786561), [phone paper](https://git.kayg.org/attachments/728b958b-523e-4abb-aac3-dcb420032ae7). Phone is emulated, not an actual iPhone/PWA qualification. Owner visual judgment remains required. How to test the new bundle: 1. Open three signed-in tabs, interrupt one tab's connection, then split or rename there. Its pending notice stays visible and typing continues; other tabs receive only server-confirmed edits. 2. Reload that unconfirmed tab: its waiting edits are lost. Reopen offline: Connect to load your layout. A warm disconnected tab retains its drawing. 3. Restore connectivity to confirm, then sign out: failed logout preserves signed-in work; successful revocation tears down local memory. Close/reopen every old bundle/PWA at cutover before claiming zero old writers; this job did not deploy or perform that cutover. Author checks: reused shared UI, kept wire/schema/reducers/native dependencies unchanged, verified no live layout storage access at 8192/32768 intents with 8195 leftover keys, retained receipt identity/refusal/duplicate/placeholder/import/teardown controls, reviewed privacy and lifecycle gaps explicitly above. No claim that every failure-table requirement is satisfied while authenticated original-session continuity is unresolved. Cleanup: job CARGO_TARGET_DIR, detached baseline and owned short fixture root removed; own private sccache stopped. Selected build/browser/fixture PIDs are gone. [Cleanup](https://git.kayg.org/attachments/344a8c12-fcf8-42fa-8d43-1ea8ea5f94ce). Source worktree and external evidence retained. No deploy; issue left open. Diff versus 2fb412d01: **580 removed / 1449 added** (tests and 171-line plan included). Production frontend alone: 243 removed / 362 added. Exact-head gate output follows verbatim; command exit status was 0: ````text ==> Repository artifact size gate repository artifact gate: PASS (41 changed path(s), merge base 2fb412d01dce) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.674s OK . ---------------------------------------------------------------------- Ran 1 test in 0.086s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [151.63ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [149.39ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [156.19ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [461.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 3s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-shim) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal) warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 4.00s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.41s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 24.97s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.15s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 31s) ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.93s (clippy: 3s) ==> SSH runtime test helper Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.22s (SSH runtime test helper: 1s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.008s OK (real-binary fixture paths: 0s) ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.40s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 25.17s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.40s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.65s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.11s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.82s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test a_missing_server_is_not_found_exit_4 ... ok test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_dry_run_plan_keeps_its_line_breaks ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_empty_no_color_is_ignored ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test json_help_and_version_are_envelopes_too ... ok test no_compiled_python_is_tracked ... ok test root_help_fits_80_columns ... ok test root_help_lists_server_init ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test user_facing_text_never_says_agent_alone ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test signal_fixture ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.07s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/replay_size.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/replay_size-012ca64e5a46eaa3) running 1 test test replay_fences_report_pre_resize_geometry_across_viewers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.29s Running tests/replay_size_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/replay_size_review-6727b43a6052c4c4) running 1 test test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.59s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.86s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.62s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/setup_output-702013ba02916bdd) running 6 tests test setup_output_keeps_legacy_and_versioned_readers ... ok test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok test setup_token_reads_a_traversable_directory_without_listing_access ... ok test unreadable_system_service_data_prints_one_sudo_command_line ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/shim.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.17s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.83s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.29s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.44s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 169 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_geometry_is_frozen_before_queued_resize_and_delayed_output ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 149 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.61s Running tests/transport.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/properties-9b39f53037898c73) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.58s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 12 tests test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test model::tests::reference_document_has_strict_shape_and_bounds ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test reducer::tests::split_divides_only_its_own_band ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 7.12s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/access_updates-401a785178272a85) running 8 tests test compact_identity_support_requires_an_explicit_strict_probe ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test an_address_that_is_an_ip_never_becomes_a_name ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.28s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/store.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.85s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.63s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2 ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.56s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.49s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test crash_mid_install_can_roll_back_and_retry ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test restart_recovers_partial_stage_retirement ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test session_restaging_uses_one_compound_command ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 27.98s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.40s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/process.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.37s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/publication.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test cleanup_script_requires_the_shipped_helper_level ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.06s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 727 tests test auth::account_events::review_revocation_r2::review_r2_aborted_commit_task_preserves_publication_order ... ok test auth::account_events::review_revocation_r2::review_r2_cancelled_refused_commit_never_publishes ... ok test auth::account_events::review_revocation_r2::review_r2_panicking_commit_waiter_preserves_publication_order ... ok test auth::account_events::review_revocation_r2::review_r2_timed_out_commit_waiter_preserves_publication_order ... ok test auth::account_events::tests::a_closed_cursor_cannot_remove_its_replacement_channel ... ok test auth::account_events::tests::a_dropped_source_reports_unavailable_instead_of_consuming_a_change ... ok test auth::account_events::tests::cancellation_preserves_an_unread_generation ... ok test auth::account_events::tests::cancelled_commit_waiter_still_commits_and_wakes_both_account_sources ... ok test auth::account_events::tests::coalesced_changes_remain_pending_for_each_affected_account ... ok test auth::account_events::tests::concurrent_final_drops_remove_the_account_before_receiver_fields_drop ... ok test auth::account_events::tests::concurrent_registration_and_cleanup_keep_the_existing_generation ... ok test auth::account_events::tests::last_subscriber_removes_only_its_account ... ok test auth::account_events::tests::many_accounts_do_not_share_generations_or_retain_inactive_entries ... ok test auth::account_events::tests::publication_wakes_outside_the_registry_lock ... ok test auth::account_events::tests::refused_transaction_commit_wakes_neither_account_source ... ok test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::account_logout_does_not_notify_another_account ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::logout_commit::logout_commit_failure_does_not_publish_revocation_or_report_success ... ok test auth::tests::logout_commit::logout_publication_measurement ... ignored, measurement only; run on a perf VM under perf-run.sh test auth::tests::logout_commit::review_account_scope_committed_logout_keeps_wake_when_waiter_is_cancelled ... ok test auth::tests::logout_commit::review_account_scope_statement_rollback_is_quiet_and_later_commit_wakes_once ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::per_account_revocation::account_logout_wakes_only_its_16_sockets_among_256 ... ok test auth::tests::socket_tests::per_account_revocation::account_recovery_wakes_only_its_16_sockets_among_256 ... ok test auth::tests::socket_tests::per_account_revocation::another_live_session_on_the_affected_account_keeps_its_proof_lease ... ok test auth::tests::socket_tests::per_account_revocation::coalesced_session_logout_cannot_hide_an_earlier_revoked_proof_lease ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_account_scope::account_deletion_retires_open_sockets_without_affecting_other_accounts ... ok test auth::tests::socket_tests::review_account_scope::lagged_cursors_survive_65536_overwrites_and_unknown_scope_wakes_every_account ... ok test auth::tests::socket_tests::review_account_scope::lost_recovery_source_closes_with_1013_without_another_authority_read ... ok test auth::tests::socket_tests::review_account_scope::lost_revocation_source_closes_with_1013_without_another_authority_read ... ok test auth::tests::socket_tests::review_account_scope::reassigned_session_cannot_authorize_work_for_its_former_account ... ok test auth::tests::socket_tests::review_account_scope::review_r2_lost_recovery_source_reports_unavailable_or_reads_authority ... ok test auth::tests::socket_tests::review_account_scope::simultaneous_recovery_a_and_logout_b_preserve_both_scopes ... ok test auth::tests::socket_tests::review_account_scope::two_accounts_revoked_before_either_cursor_runs_both_refuse ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::bootstrap_logout_before_subscription_closes_idle_upgrade ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::review_account_scope_logout_after_subscription_retires_idle_bootstrap ... ok test bootstrap_api::tests::review_account_scope_lost_bootstrap_source_retires_instead_of_spinning ... ok test bootstrap_api::tests::review_r2_restored_bootstrap_source_still_reports_unavailable ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::setup_logout_before_subscription_closes_idle_upgrade ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test bootstrap_api::tests::setup_status_tests::review_account_scope_lost_setup_source_reports_unavailable_and_retires ... ok test bootstrap_api::tests::setup_status_tests::review_r2_restored_setup_source_still_reports_unavailable ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notices_preserve_optional_geometry_through_server ... ok test embedded::regressions::replay_geometry_rejects_values_outside_u16 ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test websocket::probe_authority::review_r2_restore::review_r2_revoked_lease_with_restored_source_never_polls_work ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test result: ok. 674 passed; 0 failed; 53 ignored; 0 measured; 0 filtered out; finished in 397.48s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.28s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test independent_loads_and_base_edit_repair_exactly_once ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retarget_checks_account_ownership_even_after_close ... ok test retired_reference_does_not_block_an_unrelated_edit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test imported_name_respects_the_browser_utf16_bound ... ok test text_uses_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test healthy_real_socket_survives_a_150ms_server_stall ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::fresh_exec_closes_dumpability_before_private_startup ... running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s ok test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 36.11s Running tests/detach.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_status-7910dde34bdac077) running 14 tests test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::nothing_installed_says_so ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 782s) ==> SSH inode reuse fixture Finished `test` profile [unoptimized + debuginfo] target(s) in 0.12s Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... SSH test state root exceeds 26 bytes; using /home/agent/.cache/31d801 ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.19s (SSH inode reuse fixture: 0s) ==> shim process-per-user Finished `test` profile [unoptimized + debuginfo] target(s) in 0.06s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.10s ok test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.03s ok test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... running 1 test test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test terminal::host_budget::report_native_memory_numbers ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 133.58s (shim process-per-user: 134s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Compiling cfg-if v1.0.5 Compiling libc v0.2.190 Compiling pin-project-lite v0.2.17 Compiling serde_core v1.0.229 Compiling bytes v1.12.1 Compiling serde v1.0.229 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling futures-core v0.3.34 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling tracing-core v0.1.36 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling mio v1.2.4 Compiling smallvec v1.16.2 Compiling signal-hook-registry v1.4.8 Compiling futures-sink v0.3.34 Compiling yoke v0.8.3 Compiling tracing v0.1.44 Compiling slab v0.4.12 Compiling subtle v2.6.1 Compiling generic-array v0.14.7 Compiling tokio v1.53.3 Compiling zerovec v0.11.8 Compiling typenum v1.20.1 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling num-traits v0.2.19 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_locale_core v2.3.0 Compiling icu_collections v2.3.0 Compiling icu_properties_data v2.3.0 Compiling icu_normalizer_data v2.3.0 Compiling percent-encoding v2.3.2 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling equivalent v1.0.2 Compiling icu_provider v2.3.1 Compiling digest v0.10.7 Compiling thiserror v2.0.21 Compiling hashbrown v0.17.1 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling futures-task v0.3.34 Compiling form_urlencoded v1.2.2 Compiling indexmap v2.14.2 Compiling scopeguard v1.2.0 Compiling futures-util v0.3.34 Compiling zmij v1.0.23 Compiling serde_json v1.0.151 Compiling parking_lot_core v0.9.12 Compiling futures-channel v0.3.34 Compiling lock_api v0.4.14 Compiling idna_adapter v1.2.2 Compiling openssl-sys v0.9.117 Compiling crossbeam-utils v0.8.23 Compiling idna v1.1.0 Compiling foldhash v0.1.5 Compiling bitflags v2.13.2 Compiling rand_core v0.10.1 Compiling allocator-api2 v0.2.21 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling hashbrown v0.15.5 Compiling either v1.18.0 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling base64 v0.22.1 Compiling event-listener v5.4.2 Compiling zerocopy v0.8.60 Compiling crc v3.4.0 Compiling hashlink v0.10.0 Compiling crossbeam-queue v0.3.14 Compiling futures-intrusive v0.5.0 Compiling getrandom v0.4.3 Compiling spin v0.9.9 Compiling sha2 v0.10.9 Compiling tokio-stream v0.1.19 Compiling libsqlite3-sys v0.30.1 Compiling getrandom v0.2.17 Compiling ryu v1.0.23 Compiling sqlx-core v0.8.6 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling foreign-types-shared v0.1.1 Compiling infraternal-plugin-api v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-plugin-api) Compiling http v1.5.0 Compiling foreign-types v0.3.2 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling ring v0.17.14 Compiling nix v0.30.1 Compiling uuid v1.27.0 Compiling zeroize v1.9.0 Compiling arrayvec v0.7.8 Compiling ppv-lite86 v0.2.21 Compiling sqlx-sqlite v0.8.6 Compiling minimal-lexical v0.2.1 Compiling untrusted v0.9.0 Compiling utf8parse v0.2.2 Compiling nom v7.1.3 Compiling anstyle-parse v1.0.0 Compiling sqlx v0.8.6 Compiling httparse v1.10.1 Compiling thiserror v1.0.69 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling time-core v0.1.9 Compiling anstyle-query v1.1.5 Compiling deranged v0.5.8 Compiling tinyvec v1.13.3 Compiling powerfmt v0.2.1 Compiling is_terminal_polyfill v1.70.2 Compiling anstyle v1.0.14 Compiling cpufeatures v0.3.1 Compiling num-conv v0.2.2 Compiling colorchoice v1.0.5 Compiling rustls-webpki v0.103.16 Compiling anstream v1.0.0 Compiling chacha20 v0.10.2 Compiling time v0.3.55 Compiling rustls v0.23.46 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling tokio-util v0.7.19 Compiling tower-service v0.3.3 Compiling clap_lex v1.1.1 Compiling data-encoding v2.11.1 Compiling strsim v0.11.1 Compiling infraternal-protocol v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-protocol) Compiling rand v0.9.5 Compiling asn1-rs v0.6.2 Compiling quinn-udp v0.5.16 Compiling rand v0.10.3 Compiling clap_builder v4.6.7 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling num-integer v0.1.47 Compiling lru-slab v0.1.3 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling atomic-waker v1.1.2 Compiling fnv v1.0.7 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling rustc-hash v2.1.3 Compiling infraternal-shim v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-shim) Compiling h2 v0.4.19 Compiling want v0.3.2 Compiling base64urlsafedata v0.5.5 Compiling quinn-proto v0.11.19 Compiling oid-registry v0.7.1 Compiling num-bigint v0.4.8 Compiling clap v4.6.7 Compiling quinn v0.11.12 Compiling vte v0.15.0 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling der-parser v9.0.0 Compiling http-body-util v0.1.5 Compiling infraternal-mesh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-mesh) Compiling half v2.7.1 Compiling hyper v1.11.1 Compiling sha1 v0.10.7 Compiling sync_wrapper v1.0.2 Compiling regex-syntax v0.8.11 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling fs-err v3.3.2 Compiling hyper-util v0.1.21 Compiling x509-parser v0.16.0 Compiling mime_guess v2.0.5 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling regex-automata v0.4.18 Compiling infraternal-plugin-host-facts v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/host-facts) Compiling hex-conservative v0.2.3 Compiling hex v0.4.3 Compiling base64ct v1.8.3 Compiling unicase v2.10.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling matchers v0.2.0 Compiling password-hash v0.5.0 Compiling tokio-tungstenite v0.29.0 Compiling arc-swap v1.9.2 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling http-range-header v0.4.2 Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling bip39 v2.2.2 Compiling argon2 v0.5.3 Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling axum v0.8.9 Compiling infraternal-server v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-server) Compiling infraternal-plugin-canvas v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/canvas) Compiling infraternal-plugin-release v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/release) Compiling infraternal v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal) Compiling infraternal-status v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-status) Compiling infraternal-plugin-backup v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/relay) Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-plugin-mesh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/remote) Compiling infraternal-agent v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/infraternal-agent) Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-ssh v0.1.0 (/home/agent/wt-infraternal/layout-per-tab-250/crates/plugins/ssh) Finished `release` profile [optimized] target(s) in 2m 47s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/layout-per-tab-250/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21431472 bytes; cap: 21431472 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 0.25s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/layout-per-tab-250/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19605896 bytes; cap: 19605896 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21431472-byte cap PASS; 21431473 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19605896-byte cap PASS; 19605897 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [28.59ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [32.39ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [69.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 169s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [27.24ms] (pass) Rust and cached target compiles receive every environment remap [268.34ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [307.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler Saved lockfile ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [10.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [14.18ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [11.83ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [5424.66ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.56ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.04ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.09ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.20ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.05ms] (pass) FrameDetector > fps, p95 and window read the ring [0.15ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.23ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [0.27ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms] (pass) a shell that stays silent shows the note once the wait has run out [0.05ms] (pass) output that arrives later clears the note [0.04ms] (pass) an idle shell reattached at the same size is correctly silent and never shows the note [0.03ms] (pass) a shell that stays silent after the attach resized it shows the note [0.03ms] (pass) a resized program that repaints never shows the note, not for a frame [0.03ms] (pass) one changed dimension is a resize [0.02ms] (pass) output after the note, on a resized reattach, clears it [0.03ms] (pass) a server that reports no size keeps the wait [0.02ms] (pass) the replay fence reports a size only when both fields are usable [0.13ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.07ms] (pass) the wait grows with the round trip and stays bounded [0.05ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [0.59ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [1.38ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.06ms] (pass) synchronized terminal output > RIS clears an active mode [0.04ms] (pass) synchronized terminal output > bounds an unfinished control sequence [0.18ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.28ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.22ms] (pass) a queued fit stops when the terminal becomes suspended [0.02ms] (pass) a queued fit stops when the terminal becomes frozen [0.01ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [0.60ms] (pass) the last-account pointer of another account stays [0.08ms] (pass) an unknown account clears every account's data and keeps preferences [0.05ms] (pass) account notifications cannot write before or after disposal [0.10ms] (pass) legacy generation sweep is account scoped and reports refused erasure [0.13ms] (pass) R2: 21 legacy generations survive refused cleanup and disappear only after a successful retry [0.42ms] src/offline-drawing.test.ts: (pass) warming the shell never accesses private browser storage [0.10ms] src/session-notifications.test.ts: (pass) notifications validate account/lifetime messages and dispose callbacks [0.40ms] (pass) missing or failed notification channels do not prevent confirmed local teardown [0.13ms] src/sign-out.test.ts: (pass) a late successful logout cannot forget or announce revocation for a newer signed-in screen [0.67ms] (pass) a late failed logout does not thaw the replacement screen [0.31ms] (pass) new screen logout has its own request and old completion cannot clear its deduplication [0.31ms] (pass) default lifetime still deduplicates one failed logout and restores its screen [0.16ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.14ms] (pass) repeating the front item changes nothing [0.03ms] (pass) the list is capped, so the oldest items fall off [0.03ms] (pass) top skips items that are no longer live, without losing them [0.04ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.18ms] (pass) recentRows: a view with three windows and no use shows them in order [0.06ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.46ms] (pass) routine connection states stay out of the toast [0.05ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.06ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.14ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [672.69ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.30ms] (pass) a deferred new:below selection retains its original window [0.02ms] (pass) a deferred close selection retains its original window [0.02ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.65ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.11ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.23ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.15ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.15ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.11ms] (pass) before facts arrive the host's platform names the header [0.05ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.05ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [10.60ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [10.49ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.24ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [1.34ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [0.78ms] (pass) a recovered graph owns its node positions independently [0.09ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.10ms] (pass) with no negative pin the origin is zero and nothing shifts [0.05ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.50ms] (pass) without `access` (today's server) the person may view and may not edit [0.25ms] (pass) fields the server does not send are absent, never invented [0.11ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.04ms] (pass) anything that is not a list is refused, whole [1.80ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.06ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.20ms] (pass) answers carry the new revision, and a create the new arrow's id [0.07ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.07ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [0.87ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.20ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.25ms] (pass) a pushed recovery cancels the scheduled retry [0.23ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.26ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.25ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.08ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.42ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.33ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.22ms] (pass) initial Mesh list handles closed transport [0.16ms] (pass) initial Mesh list handles liveness deadline [0.04ms] (pass) initial Mesh list handles unreadable JSON [0.05ms] (pass) initial Mesh list handles unavailable storage [0.14ms] (pass) initial Mesh list handles forbidden action [0.05ms] (pass) initial Mesh list handles invalid stored host [0.04ms] (pass) Mesh watch withdrawal handles forbidden [0.10ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.04ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.02ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.18ms] (pass) the layout is deterministic and does not depend on input order [1.91ms] (pass) no two cards overlap, and every card lies inside the graph [4.20ms] (pass) the sheet is wider than tall, roughly 16:10 [1.39ms] (pass) a pinned node stays where it was put and the others do not move [1.42ms] (pass) a pin beyond the sheet grows the graph [0.14ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.14ms] (pass) 1,000 nodes lay out in a few milliseconds [8.08ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.48ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.22ms] (pass) a view taller than the viewport is scaled down so it fits [0.04ms] (pass) nearestStop picks the stop whose centre is closest [0.19ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.21ms] (pass) a small graph keeps one stop per node column [0.14ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.14ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.14ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.10ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.78ms] (pass) closing the new half gives the layout back exactly, in the model [1.24ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.38ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.25ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.57ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.62ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.23ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.32ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.13ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.16ms] (pass) random sequences of split right, split down, new window right and close never break the grid [42.85ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.59ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.17ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.76ms] (pass) a chain of neighbours is pushed in turn [0.09ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.31ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.39ms] (pass) snapping rounds to whole cells [0.05ms] (pass) reach follows grants through tags and keeps the relay [0.14ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.06ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.02ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.09ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.08ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces in-memory session rows without rewriting legacy storage [0.98ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.18ms] (pass) inventory keeps a remote session per tab and refuses a cross-host attach [0.25ms] (pass) superseded status snapshots release records for sessions this device never opened [0.66ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.08ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.07ms] (pass) a final Close before the first positive census never revives a new ID [0.10ms] (pass) a later absence retires a new ID after its first positive census [0.08ms] (pass) another host's census cannot clear a new shell's census fence [0.04ms] (pass) another host's close cannot clear a new shell's census fence (pass) shared membership marks windows open without any local attachment [0.23ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.69ms] (pass) a detected operating system supplies the live popover mark [0.70ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.00ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.15ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.18ms] (pass) unknown and ambiguous labels never open an embedded shell [0.07ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.10ms] (pass) an authoritative host snapshot replaces admission with one notification [0.19ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.15ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.05ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.93ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.16ms] (pass) a removal in another browser withdraws the host [0.18ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.16ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.31ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.30ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.11ms] (pass) a known retired status survives repeated selection and generic ended answers [0.08ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [12.59ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [9.96ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.01ms] (pass) legacy refusals still work and malformed counters never reach the message [0.33ms] (pass) product copy names the host and counters and never renders untrusted server text [0.26ms] (pass) oversized refusal JSON is ignored before parsing [0.14ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.52ms] (pass) pointerdown supersedes every older focus intent [0.03ms] (pass) keydown supersedes every older focus intent [0.02ms] (pass) input supersedes every older focus intent [0.02ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [27.62ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [1.73ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [0.78ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [0.89ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.48ms] (pass) dispose cancels late callbacks after sign-out [0.30ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [1.87ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.71ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [0.31ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable without rewriting its source [0.32ms] (pass) ready edits share one network round trip with a bounded in-flight window [0.70ms] (pass) the optimistic semantic projection paints before any server receipt [0.41ms] (pass) a no-op drawing capture does not trigger another paint [0.22ms] (pass) review: a refused structural edit cannot strand later valid edits [0.51ms] (pass) a definitive refusal paints rollback in memory and never retries after reconnect [0.51ms] (pass) a stale refusal cannot discard a new-connection retry [0.28ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.13ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [0.27ms] (pass) legacy import retires only after receipt and canonical coverage, receipt first=false [0.30ms] (pass) legacy import retires only after receipt and canonical coverage, receipt first=true [0.08ms] (pass) refused import and refused cleanup preserve their legacy source until confirmed removal succeeds [0.41ms] (pass) reference completion during failed logout is retained without sending until edits resume [0.55ms] src/canvas/model/lifetime.test.ts: (pass) logout freezes the initiating account; failure preserves its queue; success forgets only that lifetime [0.13ms] (pass) dropping a session clears canonical drawing, placeholders and pending callbacks permanently [0.22ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.16ms] src/canvas/model/per-tab.test.ts: (pass) Hunt 1 / R1 adoption: online peers cannot overwrite or retire a live offline queue [0.90ms] (pass) R1 failed replacement / R2 unreadable source / 33+33 legacy columns: sources never retire without import confirmation [0.52ms] (pass) R2 full-history flush / R3 refused cleanup: 8192 queued intents do zero storage work [311.45ms] (pass) R2 full-history flush / R3 refused cleanup: 32768 queued intents do zero storage work [1310.16ms] (pass) R2 concurrent first tabs / failed marker / R3 missing locks: no lifetime creation or lock fallback exists [0.88ms] (pass) R2 sign-out between check/write / R3 delayed startup: teardown invalidates old callbacks before later login [0.97ms] (pass) R2 completed capture before 300 ms: unconfirmed tab loss is explicit; confirmed state restores from server [0.53ms] (pass) R2 100 snapshots and 50 ms do not establish a receipt identity or expire uncertainty [62.51ms] (pass) absent, throwing and recovered storage cannot change live edit acceptance [1.46ms] (pass) refused individual intents leave independent tabs and later edits live [0.33ms] (pass) R1 stale unresolved duplicate cannot suppress a completed same-tab birth [0.91ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [0.46ms] (pass) right split of a stack preserves the upper band [0.36ms] (pass) reorder uses stable neighbours and emits no document [0.54ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.66ms] (pass) a three-window reorder sends one semantic move [0.26ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.40ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.40ms] (pass) a narrow right split widens first so both halves remain valid [0.42ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.50ms] src/canvas/model/queue-budget.test.ts: (pass) adjacent same-field unsent edits coalesce; sent requests retain identical identity and input [0.41ms] (pass) byte backpressure reports refusal before changing projection or silently dropping older work [0.20ms] (pass) rejected placeholder cancellation preserves the accepted birth and unresolved dependency [0.30ms] (pass) completed reference size counts toward backpressure without mutating a refused completion [0.31ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.34ms] (pass) a document survives JSON and rebuilds the same columns [0.35ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.09ms] (pass) parseDocument rejects anything that is not a document of this format [0.15ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.12ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.23ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.23ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.16ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.07ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.04ms] (pass) a captured graph document is independent of the next pin drag [0.03ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [0.59ms] (pass) inventory includes shared memberships that this device cannot render [0.56ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.18ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.17ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [2432.56ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [1526.90ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [2.65ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [1.16ms] src/canvas/model/journal-confirmation.test.ts: (pass) hunt 2: uncertain sent edit stays hidden over a newer snapshot until its receipt [0.66ms] (pass) R1 held notification: a receipt above canonical explicitly reveals the overlay [0.26ms] (pass) R2 receiptless identity survives 100 matching snapshots without silent confirmation [0.55ms] (pass) R1 covered receipt is pruned before projecting canonical revision 3 [0.19ms] (pass) duplicate event then late refusal cannot discard independent work [0.17ms] src/canvas/model/server-store-p3-review.test.ts: (pass) review: two successive gaps coalesce while each snapshot is outstanding [1.01ms] (pass) review: a snapshot arriving after newer deltas never rolls back canonical state [0.12ms] (pass) review: outage edits wait for snapshot then send each identity once in order [0.63ms] (pass) review: a 3 s RTT fresh route stays quiet until its complete recovery budget [0.39ms] (pass) review: changed RTT reschedules the notice and successful recovery cancels future notices [0.34ms] (pass) review: recovery before the budget remains quiet across repeated drops and disposal frees timers [2.01ms] (pass) review: an edit first made while offline eventually emits the calm notice [0.38ms] (pass) review: a first-connect outage with no RTT sample cannot hide pending edits forever [0.38ms] (pass) hunt 4: slow snapshots own one watchdog; bounded retries pause offline and disposal cancels them [0.27ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through same-tab reference completion [0.55ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.90ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.21ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.57ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.68ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.27ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [51.52ms] (pass) review reconnect budget survives sockets that open then close without events [46.07ms] (pass) review explicit retry resumes after the setup feed stops [46.66ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.50ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.09ms] (pass) listed host plus port retains its saved user in the serialized destination [0.16ms] (pass) review listed inventory name plus port retains its resolved address [0.19ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.06ms] (pass) parseSetupEvent > drops anything malformed [0.04ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.03ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.10ms] (pass) foldSetup > a stage that reports done alone still finishes [0.06ms] (pass) foldSetup > ready done completes the run [0.03ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.08ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.08ms] (pass) review malformed setup fields are dropped without coercion errors [0.09ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.08ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.20ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.03ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.86ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.23ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.75ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.15ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.30ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.42ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.36ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.18ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [1.09ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.30ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.11ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.08ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.15ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.18ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.07ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.08ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.11ms] (pass) guideFor > each failure kind names its fix [0.06ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.05ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.15ms] (pass) parseTarget > reads an ssh:// address [0.05ms] (pass) parseTarget > refuses garbage around an ssh command [0.06ms] (pass) parseTarget > refuses what cannot name a host [0.03ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.33ms] (pass) parseSshConfig > recognises config text [0.07ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.07ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.06ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.08ms] (pass) only a completed canonical host identity becomes terminal authority [0.11ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.03ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms] (pass) install diagnostics name the failed step and public host error [0.05ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.18ms] (pass) release payload verification names the architecture step and plain reason [0.02ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.06ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.05ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.11ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.05ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.46ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.30ms] (pass) ready CA begins the requested installation mode without another prompt [0.09ms] (pass) closing during CA confirmation never starts an SSH attempt [0.20ms] (pass) a typed root login requires explicit consent before any installation [0.24ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.42ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.43ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.63ms] (pass) a chunk that both sides use stays critical [0.19ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.13ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.14ms] (pass) automatic canonical painting loads after the first canvas draw [0.18ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.05ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.75ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.34ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [7.77ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [18.23ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.64ms] (pass) abandoned word acknowledgement uploads nothing [1.91ms] (pass) settled acknowledgement cannot upload later (dismissed) [1.48ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [1.51ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.08ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.81ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.11ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.01ms] (pass) malformed or excessive remaining wait -1 is denied [1.17ms] (pass) malformed or excessive remaining wait 0.5 is denied [0.87ms] (pass) malformed or excessive remaining wait 172801 is denied [1.35ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.15ms] (pass) malformed or excessive remaining wait 90000 is denied [1.04ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.17ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.22ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.06ms] (pass) the viewer announces the link-doubt capability in its Hello [1.72ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.12ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.02ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.19ms] (pass) routine detach and connection rotation reasons stay neutral [0.01ms] (pass) a stream close that reattaches never says the terminal ended [0.13ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.06ms] (pass) unknown close text is discarded instead of reaching the person or console [0.06ms] (pass) a storm of closes prints one line per minute and counts the rest [0.26ms] (pass) counted closes are reported when their window ends, without another close [0.04ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [0.93ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.33ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.62ms] (pass) the online event retries by itself [5.34ms] 395 pass 0 fail 22197 expect() calls Ran 395 tests across 66 files. [12.38s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [11.66ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.03ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [2.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.25ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [0.94ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [4.27ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [1.22ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.18ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [1.10ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [0.84ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [0.73ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [0.49ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [0.63ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [0.64ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.46ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.37ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.42ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [0.49ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [1.99ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [3.18ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [1.00ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [0.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [0.79ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [0.90ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [0.89ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [1.18ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [0.82ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [7.72ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [1.34ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.26ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [0.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [0.91ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [0.80ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [0.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [2.44ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [0.80ms] (pass) retirement gives a queued correlated pong one task turn [0.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [1.00ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [0.62ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [0.61ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [0.68ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [0.67ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [0.69ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [0.85ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [0.67ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [0.71ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [1.05ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [1.24ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [1.16ms] (pass) a pending confirmation is reset by reconnect [1.05ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [1.02ms] (pass) a pending confirmation is reset by dispose [0.89ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [1.75ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [1.74ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [1.19ms] (pass) a socket lost while hidden waits for visibility before reconnecting [0.75ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [39.38ms] (pass) visibility notices require both peers to support them: false [0.35ms] (pass) visibility notices require both peers to support them: true [0.21ms] (pass) hiding a page cancels a retry scheduled while it was visible [0.49ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [1.08ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [0.83ms] (pass) a layout subscription starts the connection before any terminal exists [0.23ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [0.68ms] (pass) resync reopens a feature subscription with the same server ID [0.18ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [8.52ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [1.26ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.34ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.44ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.55ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.17ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.05ms] (pass) query replies negotiate independently with Hello caps 4 (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [7.17ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [2.03ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [0.55ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [0.49ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.45ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.44ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [0.41ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [7.49ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [1.08ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [0.46ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.20ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.26ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.13ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.14ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [2.19ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.24ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [1.48ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [0.60ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [0.85ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.15ms] (pass) review: retained input and consent are local to their terminal window [0.13ms] (pass) review: selecting a different session removes saved typing and its action [0.17ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.18ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.40ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [1.75ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [0.80ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [0.67ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [198.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.42ms] (pass) all requested query families have identities [0.09ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.29ms] (pass) oversized OSC retains BEL termination before a later query [0.10ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [182.27ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [1.74ms] (pass) review: zero-padded CPR gives every real renderer response an identity [0.28ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.23ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [5.79ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [33.96ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [1.17ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.63ms] (pass) nested writes and memory growth cannot replace borrowed input [0.34ms] (pass) allocation refusal never writes or frees unowned memory [1.42ms] (pass) empty scopes accept no input and reject later writer use [0.27ms] (pass) input views of native memory survive allocation-driven memory growth [0.20ms] (pass) throwing callbacks release exactly their owned input allocation [0.17ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [251.00ms] $ bun run build.ts built chunk-23as0kst.js, chunk-5xwdr39w.js, chunk-80np2ghw.js, chunk-tw86azhm.js, chunk-t62akxxk.js, chunk-szns5x6a.js, chunk-ytz2qvxs.js, chunk-na49xj9e.js, chunk-p6dfdmqz.js, chunk-tj8daj0z.js, chunk-gxvqf3b8.js, chunk-warvf74m.js, chunk-fx9rjddg.js, chunk-kv1b7eg4.js, chunk-t5736zsg.js, chunk-d537z935.js, chunk-t1vhpenw.js, chunk-txzfc4ar.js, main.js, chunk-3s71etxc.js, chunk-vxhjgegw.js, chunk-w8xtw9td.js, chunk-5vtmph0b.js, chunk-b27vn5bm.js, chunk-63egtnaq.js, chunk-mqfdvw2d.js, chunk-hywrqj5q.js, chunk-mxyxwknh.js, chunk-ntfpvb27.js, chunk-t7wpy203.js, chunk-c76h7v56.js, chunk-466cm39d.js, chunk-r4nqx4zq.js, chunk-xcd8jkt6.js, chunk-axbkkqp1.js, chunk-y0nzyzrn.js, chunk-qxwfp64q.js, chunk-2cm8fz05.js, chunk-x9r2hxvt.js, chunk-qkj03gxj.js, chunk-jtqf0t7y.js, chunk-jgq66y52.js, chunk-2s6j7tq3.js, chunk-x4c3pzks.js, chunk-y8j5e0s0.js, chunk-r7ams2xa.js, chunk-ckejx7jz.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-aypf0b87.js, chunk-vf6dy6k6.js, chunk-jx46157v.js, chunk-8pcd9x78.js, chunk-md155x69.js, chunk-f7rrfen3.js, chunk-pgpz5w9m.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-p54j82fj.js, chunk-xmrgqem7.js, chunk-ff3nvh2r.js, chunk-0qmaxw8n.js onDemand chunk-vf6dy6k6.js: identity=6983 gzip=3102 brotli=2812 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes critical chunk-kv1b7eg4.js: identity=6075 gzip=2538 brotli=2232 bytes onDemand chunk-y8j5e0s0.js: identity=5359 gzip=2582 brotli=2301 bytes critical chunk-b27vn5bm.js: identity=2161 gzip=1059 brotli=905 bytes critical chunk-pgpz5w9m.js: identity=43020 gzip=14711 brotli=13181 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-5xwdr39w.js: identity=191 gzip=169 brotli=127 bytes onDemand chunk-466cm39d.js: identity=14598 gzip=5444 brotli=4899 bytes critical chunk-23as0kst.js: identity=34792 gzip=10163 brotli=9116 bytes onDemand chunk-p6dfdmqz.js: identity=3891 gzip=1735 brotli=1504 bytes critical chunk-5vtmph0b.js: identity=1776 gzip=855 brotli=693 bytes onDemand chunk-2cm8fz05.js: identity=6148 gzip=2781 brotli=2513 bytes onDemand chunk-0qmaxw8n.js: identity=1063 gzip=649 brotli=516 bytes deferred chunk-t62akxxk.js: identity=38188 gzip=13892 brotli=12425 bytes critical chunk-63egtnaq.js: identity=1188 gzip=691 brotli=582 bytes critical faulty-terminal.worker.js: identity=1086 gzip=558 brotli=486 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes onDemand chunk-x9r2hxvt.js: identity=2824 gzip=1386 brotli=1191 bytes critical chunk-t5736zsg.js: identity=17631 gzip=6249 brotli=5563 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-80np2ghw.js: identity=6503 gzip=2411 brotli=2148 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-mqfdvw2d.js: identity=2557 gzip=1178 brotli=1006 bytes critical chunk-tj8daj0z.js: identity=707 gzip=366 brotli=305 bytes critical chunk-t1vhpenw.js: identity=2529 gzip=1020 brotli=889 bytes onDemand chunk-xcd8jkt6.js: identity=1026 gzip=623 brotli=498 bytes onDemand chunk-2s6j7tq3.js: identity=540 gzip=354 brotli=320 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes deferred chunk-t7wpy203.js: identity=127057 gzip=42662 brotli=37412 bytes critical chunk-txzfc4ar.js: identity=386 gzip=236 brotli=195 bytes onDemand chunk-x4c3pzks.js: identity=11562 gzip=4695 brotli=4279 bytes onDemand chunk-y0nzyzrn.js: identity=10904 gzip=4427 brotli=4030 bytes onDemand chunk-aypf0b87.js: identity=49320 gzip=15450 brotli=13785 bytes onDemand chunk-ckejx7jz.js: identity=7662 gzip=3398 brotli=2968 bytes critical chunk-vxhjgegw.js: identity=1106 gzip=665 brotli=604 bytes onDemand chunk-md155x69.js: identity=33394 gzip=12804 brotli=11521 bytes critical chunk-f7rrfen3.js: identity=199 gzip=160 brotli=139 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-mxyxwknh.js: identity=2007 gzip=1005 brotli=858 bytes critical chunk-xmrgqem7.js: identity=9907 gzip=4060 brotli=3496 bytes onDemand chunk-warvf74m.js: identity=228 gzip=179 brotli=159 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes onDemand chunk-qkj03gxj.js: identity=2522 gzip=1133 brotli=964 bytes onDemand chunk-r4nqx4zq.js: identity=11126 gzip=4260 brotli=3884 bytes onDemand chunk-jtqf0t7y.js: identity=1170 gzip=705 brotli=590 bytes critical chunk-d537z935.js: identity=12197 gzip=4853 brotli=4312 bytes onDemand chunk-tw86azhm.js: identity=5812 gzip=2378 brotli=2144 bytes onDemand chunk-p54j82fj.js: identity=9158 gzip=3337 brotli=2894 bytes onDemand chunk-r7ams2xa.js: identity=4696 gzip=1953 brotli=1723 bytes onDemand chunk-fx9rjddg.js: identity=2420 gzip=1196 brotli=1075 bytes onDemand chunk-jgq66y52.js: identity=1649 gzip=775 brotli=675 bytes onDemand chunk-8pcd9x78.js: identity=6744 gzip=3166 brotli=2879 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=104505 gzip=38495 brotli=33234 bytes critical chunk-jx46157v.js: identity=162 gzip=150 brotli=145 bytes onDemand chunk-na49xj9e.js: identity=2108 gzip=1038 brotli=870 bytes critical chunk-qxwfp64q.js: identity=729523 gzip=210463 brotli=171090 bytes onDemand chunk-ytz2qvxs.js: identity=6265 gzip=2100 brotli=1862 bytes deferred chunk-ntfpvb27.js: identity=1537 gzip=798 brotli=721 bytes critical chunk-w8xtw9td.js: identity=8377 gzip=3575 brotli=3187 bytes critical chunk-szns5x6a.js: identity=5890 gzip=2462 brotli=2140 bytes critical chunk-3s71etxc.js: identity=5448 gzip=2606 brotli=2374 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes onDemand chunk-hywrqj5q.js: identity=4594 gzip=2012 brotli=1787 bytes JavaScript transfer, critical: identity=989432 gzip=306638/307200 brotli=255471/256000 bytes JavaScript transfer, deferred: identity=168122 gzip=58034/61440 brotli=51149/55296 bytes JavaScript transfer, onDemand: identity=231921 gzip=91888/20480 brotli=81908/18432 bytes JavaScript transfer, onDemand largest chunk chunk-aypf0b87.js: gzip=15450/20480 brotli=13785/18432 bytes (class total gzip=91888 brotli=81908, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.34ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.41ms] (pass) subscription not found ends delivery before a late refresh rejection [1.17ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.11ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.10ms] (pass) synchronous subscription refusal releases the transport exactly once [0.15ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.13ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.14ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.01ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms] (pass) split mux header preserves trailing Close [0.23ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.75ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.08ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.61ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.80ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.64ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.37ms] (pass) superseded failure preserves a newer pending refresh [2.53ms] src/stream.test.ts: stream differential: 155 streams, 16716 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4237.74ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [5.71ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.07ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [3.76ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.13ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.33ms] (pass) review continuation stops after forbidden [1.15ms] (pass) review continuation stops after superseded [1.12ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.16ms] (pass) a changed revision discards earlier pages before assembling its restart [0.09ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.10ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.27ms] (pass) watch never publishes a partial page; withdrawn=true [1.14ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.27ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.18ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.38ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.51ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.12ms] 39 pass 0 fail 50325 expect() calls Ran 39 tests across 10 files. [4.31s] ````
Author
Owner

Independent verification started: review-layout-per-tab-250 at detached target 1543f3fb03; merge base with origin/dev recorded locally. Tests/evidence only, no implementation changes, push or deploy. Checking D312 failure cases, original-session account isolation, retained review controls and production browser engines.

Independent verification started: review-layout-per-tab-250 at detached target 1543f3fb034bd37d5797f9474bf327c7eb8dc217; merge base with origin/dev recorded locally. Tests/evidence only, no implementation changes, push or deploy. Checking D312 failure cases, original-session account isolation, retained review controls and production browser engines.
Author
Owner

Perf matrix attempt on perf-test-03 (orchestrator, root window agreed with calternal): not run, kit fails before measuring.

Kit layout-production-recovery.tgz (sha256 df910f30…59282a9d, verified). Setup used:

  • a root unshare --mount --propagation private, with a private tmpfs on /run/infraternal (mode 0700). The driver must run as root: as agent it fails with EACCES readlink /proc/1/ns/mnt at perf-restart.js:1411. Root runs take the same two perf locks through /usr/local/bin/perf-lock.sh (because perf-run.sh only accepts the agent user), inside systemd-run --scope --slice=perf.slice.
  • Chromium 1228 headless shell at a user-local path; its missing system libraries (nss, atk, X, gbm…) came from a user-local nix closure through LD_LIBRARY_PATH. Nothing was installed system-wide.

Result: all 9 cases (sessions 1/10/60 × daemon/shim/closed) fail the same way right after restart fixture: CA initialized:

ExpectError: expect(received).toBe(expected)
Expected: 1   Received: 0
- Timeout 5000ms exceeded while waiting on the predicate
    at exerciseRestart (apps/tracer/real/perf-restart.js:1249:152)

That is the expect.poll(() => new Set(server.bridges.filter(b => !b.closed).flatMap(b => [...b.attached.values()].flat())).size).toBe(visibleSessions) check. The windows reach data-status="live" (the per-window assertion above it passed), but the fixture's bridge sees no attached session. So the fixture's attach bookkeeping and the head's behaviour disagree. This has to be fixed in the #250 fix round. The kit must pass one case on a build host (in an unprivileged user + mount namespace with a private /run/infraternal, if possible) before it comes back to the perf VM.

No numbers were produced, so D259/D267/heap/task qualification stays open. The VM state diff after cleanup was empty, apart from the user-level ~/infraternal-perf work directory (kept for today's re-run, removed afterwards).

**Perf matrix attempt on perf-test-03 (orchestrator, root window agreed with calternal): not run, kit fails before measuring.** Kit `layout-production-recovery.tgz` (sha256 `df910f30…59282a9d`, verified). Setup used: - a root `unshare --mount --propagation private`, with a private tmpfs on `/run/infraternal` (mode 0700). The driver must run as **root**: as agent it fails with `EACCES readlink /proc/1/ns/mnt` at perf-restart.js:1411. Root runs take the same two perf locks through `/usr/local/bin/perf-lock.sh` (because `perf-run.sh` only accepts the agent user), inside `systemd-run --scope --slice=perf.slice`. - Chromium 1228 headless shell at a user-local path; its missing system libraries (nss, atk, X, gbm…) came from a user-local nix closure through `LD_LIBRARY_PATH`. Nothing was installed system-wide. Result: **all 9 cases (sessions 1/10/60 × daemon/shim/closed) fail the same way** right after `restart fixture: CA initialized`: ``` ExpectError: expect(received).toBe(expected) Expected: 1 Received: 0 - Timeout 5000ms exceeded while waiting on the predicate at exerciseRestart (apps/tracer/real/perf-restart.js:1249:152) ``` That is the `expect.poll(() => new Set(server.bridges.filter(b => !b.closed).flatMap(b => [...b.attached.values()].flat())).size).toBe(visibleSessions)` check. The windows reach `data-status="live"` (the per-window assertion above it passed), but the fixture's bridge sees no attached session. So the fixture's attach bookkeeping and the head's behaviour disagree. This has to be fixed in the #250 fix round. The kit must pass one case on a build host (in an unprivileged user + mount namespace with a private /run/infraternal, if possible) before it comes back to the perf VM. No numbers were produced, so D259/D267/heap/task qualification stays open. The VM state diff after cleanup was empty, apart from the user-level `~/infraternal-perf` work directory (kept for today's re-run, removed afterwards).
Author
Owner

Independent finding R250-01 — P2: distinct valid view/column IDs coalesce and lose an accepted edit. journal.ts field() joins identifiers with /: pairs (a, /b) and (a/, b) collide. Two unsent weight changes show 2/3 optimistically, but confirming all queued requests leaves 1/3 without refusal or disconnect. D312 permits coalescing only the same fields.

Failing test committed locally at 06e297ce2 on review-layout-per-tab-250: apps/tracer/test/layout-coalescing-review.test.ts, distinct view and column identifiers cannot supersede each other's unsent weights. Output: 0 pass / 1 fail / 4 assertions. Tracer check and diff check pass; implementation unchanged. No push or deploy.
coalescing.log

Independent finding R250-01 — P2: distinct valid view/column IDs coalesce and lose an accepted edit. journal.ts field() joins identifiers with `/`: pairs (`a`, `/b`) and (`a/`, `b`) collide. Two unsent weight changes show 2/3 optimistically, but confirming all queued requests leaves 1/3 without refusal or disconnect. D312 permits coalescing only the same fields. Failing test committed locally at 06e297ce2 on review-layout-per-tab-250: apps/tracer/test/layout-coalescing-review.test.ts, `distinct view and column identifiers cannot supersede each other's unsent weights`. Output: 0 pass / 1 fail / 4 assertions. Tracer check and diff check pass; implementation unchanged. No push or deploy. [coalescing.log](https://git.kayg.org/attachments/e0a81a2c-3594-4162-8440-8df39793685f)
Author
Owner

Independent finding R250-02 — P1: original-account layout crosses into a different account after suspended-tab reauthentication. Confirmed against production UI at 1543f3fb0 and the real server, SQLite and protocol, not only a local lifetime mock.

Sequence: A retains an unconfirmed legacy initialize request; notification is missed, its socket drops and the page freezes. A real /auth/logout succeeds. The same browser then receives a valid unlocked session for distinct account B (existing secondAccount fixture recipe; credentials remain in memory). On resume, the old tab reconnects with B's ambient cookie and retries A's initialize input. B's canonical layout changes from revision 1 to 2 and gains A's appearance reference alongside B's shortcuts reference. This proves different-account server admission, strengthening the implementation's acknowledged same-account continuity gap.

Locations: main.ts:663–672 accepts any nonempty foreground session without comparing user_id; connection.ts:455–476 reconnects with ambient cookies; server-store.ts retains the original queued document. D312/approved plan requires original authenticated lifetime binding across later sign-in.

Failing test committed locally on review-layout-per-tab-250 at 7e4d389200: real/layout-session-binding-review.spec.ts, a suspended original-account import cannot be admitted by a different account session. Strict real-spec compiler and diff check pass. No implementation fixes, push, deploy or issue closure. Current confirmed counts: 0 P0 / 1 P1 / 1 P2 / 0 P3; review continues.
session-binding.log

Independent finding R250-02 — P1: original-account layout crosses into a different account after suspended-tab reauthentication. Confirmed against production UI at 1543f3fb0 and the real server, SQLite and protocol, not only a local lifetime mock. Sequence: A retains an unconfirmed legacy initialize request; notification is missed, its socket drops and the page freezes. A real /auth/logout succeeds. The same browser then receives a valid unlocked session for distinct account B (existing secondAccount fixture recipe; credentials remain in memory). On resume, the old tab reconnects with B's ambient cookie and retries A's initialize input. B's canonical layout changes from revision 1 to 2 and gains A's appearance reference alongside B's shortcuts reference. This proves different-account server admission, strengthening the implementation's acknowledged same-account continuity gap. Locations: main.ts:663–672 accepts any nonempty foreground session without comparing user_id; connection.ts:455–476 reconnects with ambient cookies; server-store.ts retains the original queued document. D312/approved plan requires original authenticated lifetime binding across later sign-in. Failing test committed locally on review-layout-per-tab-250 at 7e4d38920033bf974495e0d118f9f1966f3804a8: real/layout-session-binding-review.spec.ts, `a suspended original-account import cannot be admitted by a different account session`. Strict real-spec compiler and diff check pass. No implementation fixes, push, deploy or issue closure. Current confirmed counts: 0 P0 / 1 P1 / 1 P2 / 0 P3; review continues. [session-binding.log](https://git.kayg.org/attachments/71768899-accb-461c-9d57-915bc7556a45)
Author
Owner

Independent finding R250-03 — P2, inherited: the brief's zero-identity-write requirement still fails. Sign-in and the layout-close hint write tracer.hints.; clearAccountStorage returns true but intentionally retains it. Production Chromium independently observes the account-scoped key after an offline close. This is not a new layout/drawing writer introduced by #250: hints.ts is unchanged and account-storage.ts explicitly documents the retained-hint exception. That exception conflicts with the stronger review requirement and D245 all-account-data cleanup, so it needs explicit owner reconciliation.

Failing tests committed locally at 194a39885 on review-layout-per-tab-250: test/layout-identity-review.test.ts (0 pass / 1 fail / 2 assertions), plus real/layout-engines-review.spec.ts all-storage assertions. The browser assertions are soft so subsequent reconnect/reload/logout/Cache/IndexedDB/OPFS checks still execute. Tracer and strict real-spec compiler checks pass. No implementation changes or push.

Current confirmed counts: 0 P0 / 1 P1 / 2 P2 / 0 P3. Production WebKit and Firefox functional suites are running with external enrollment adapters; performance qualification remains with the orchestrator and is not inferred from build-host timings.
identity.log

Independent finding R250-03 — P2, inherited: the brief's zero-identity-write requirement still fails. Sign-in and the layout-close hint write tracer.hints.<account UUID>; clearAccountStorage returns true but intentionally retains it. Production Chromium independently observes the account-scoped key after an offline close. This is not a new layout/drawing writer introduced by #250: hints.ts is unchanged and account-storage.ts explicitly documents the retained-hint exception. That exception conflicts with the stronger review requirement and D245 all-account-data cleanup, so it needs explicit owner reconciliation. Failing tests committed locally at 194a39885 on review-layout-per-tab-250: test/layout-identity-review.test.ts (0 pass / 1 fail / 2 assertions), plus real/layout-engines-review.spec.ts all-storage assertions. The browser assertions are soft so subsequent reconnect/reload/logout/Cache/IndexedDB/OPFS checks still execute. Tracer and strict real-spec compiler checks pass. No implementation changes or push. Current confirmed counts: 0 P0 / 1 P1 / 2 P2 / 0 P3. Production WebKit and Firefox functional suites are running with external enrollment adapters; performance qualification remains with the orchestrator and is not inferred from build-host timings. [identity.log](https://git.kayg.org/attachments/229967f0-67a9-4e5f-aa59-6d14b84e127d)
Author
Owner

Independent production-engine step: WebKit completed the 32 retained functional tests (timing specs excluded): 23 pass / 9 fail. An additional all-storage/reconnect control also failed on an offline-emulation assumption, making 23 pass / 10 fail across 33 total. No performance conclusions from build-host durations.

Three retained failures are explicit unsupported harness APIs (two CDP diagnostic sessions and mobile mouse.wheel). Other failures involve touch splits, offline reload/reconnect and the intercepted-logout fixture; isolating them before assigning additional product findings. A fresh touch-only control has no network interception. The new all-storage control now uses explicit held layout delivery and socket disconnection, because engine offline emulation can leave an established WebSocket alive.

External-only adapters bootstrap the existing real passkey ceremony in Chromium and transfer the live cookie into the target engine; Firefox disables unsupported isMobile while retaining viewport/touch options. Product and retained test bodies are unchanged. Adapter diff and failure summary attached. Firefox's full matrix is still running. Actual iPhone/PWA/private-mode and perf-VM queue/heap/D259/D267 qualification remain outstanding; the encoded 32 MiB estimate is a P2 qualification blocker, not a claimed measured heap bound or a reproduced budget failure.
webkit-failure-summary.txt
engine-adapters.patch

Independent production-engine step: WebKit completed the 32 retained functional tests (timing specs excluded): 23 pass / 9 fail. An additional all-storage/reconnect control also failed on an offline-emulation assumption, making 23 pass / 10 fail across 33 total. No performance conclusions from build-host durations. Three retained failures are explicit unsupported harness APIs (two CDP diagnostic sessions and mobile mouse.wheel). Other failures involve touch splits, offline reload/reconnect and the intercepted-logout fixture; isolating them before assigning additional product findings. A fresh touch-only control has no network interception. The new all-storage control now uses explicit held layout delivery and socket disconnection, because engine offline emulation can leave an established WebSocket alive. External-only adapters bootstrap the existing real passkey ceremony in Chromium and transfer the live cookie into the target engine; Firefox disables unsupported isMobile while retaining viewport/touch options. Product and retained test bodies are unchanged. Adapter diff and failure summary attached. Firefox's full matrix is still running. Actual iPhone/PWA/private-mode and perf-VM queue/heap/D259/D267 qualification remain outstanding; the encoded 32 MiB estimate is a P2 qualification blocker, not a claimed measured heap bound or a reproduced budget failure. [webkit-failure-summary.txt](https://git.kayg.org/attachments/223234b2-d0be-4d39-9945-eb4f75964c77) [engine-adapters.patch](https://git.kayg.org/attachments/eb9b7459-bd7a-4b6a-a730-60127580057a)
Author
Owner

Independent finding R250-04 — P2: production Playwright WebKit does not split when the enabled touch Split right control is tapped. A dedicated test with no socket routing, delay or offline emulation fails expected 2 windows / actual 1, both on fresh navigation and after reload. The same two controls pass under Chromium and Firefox. This isolates the symptom from the earlier intercepted phone-split fixtures.

Failing test committed locally at fbd882ca90: real/layout-touch-review.spec.ts, reload=false and reload=true variants. The toolbar/touch code predates this branch; a merge-base UI control will check inherited behavior before the final attribution. No actual iPhone/PWA claim. Strict real-spec compiler and diff checks pass; no product changes.

The strengthened all-storage control (10b0fffcd) holds only layout delivery and explicitly disconnects its socket instead of trusting engine offline flags. It now completes every phase in all three engines, including two devices closing the same window, reconnect, reload and logout. All non-identity checks pass (layout/drawing storage, empty IndexedDB/OPFS, public-only Cache entries); seven soft assertions per engine report the already-recorded retained account hint key, R250-03. It is not seven additional findings.

Current reproduced defect counts: 0 P0 / 1 P1 / 3 P2 / 0 P3. Separate P2 qualification blockers remain the unmeasured queue/heap/task/D259/D267 requirements and incomplete real-device/private-mode support evidence. Full retained Chromium rerun and exact-target fast/static comparison are running sequentially.
webkit-controls.log

Independent finding R250-04 — P2: production Playwright WebKit does not split when the enabled touch Split right control is tapped. A dedicated test with no socket routing, delay or offline emulation fails expected 2 windows / actual 1, both on fresh navigation and after reload. The same two controls pass under Chromium and Firefox. This isolates the symptom from the earlier intercepted phone-split fixtures. Failing test committed locally at fbd882ca90b40e80dc93adb15042ff7e118da0a6: real/layout-touch-review.spec.ts, reload=false and reload=true variants. The toolbar/touch code predates this branch; a merge-base UI control will check inherited behavior before the final attribution. No actual iPhone/PWA claim. Strict real-spec compiler and diff checks pass; no product changes. The strengthened all-storage control (10b0fffcd) holds only layout delivery and explicitly disconnects its socket instead of trusting engine offline flags. It now completes every phase in all three engines, including two devices closing the same window, reconnect, reload and logout. All non-identity checks pass (layout/drawing storage, empty IndexedDB/OPFS, public-only Cache entries); seven soft assertions per engine report the already-recorded retained account hint key, R250-03. It is not seven additional findings. Current reproduced defect counts: 0 P0 / 1 P1 / 3 P2 / 0 P3. Separate P2 qualification blockers remain the unmeasured queue/heap/task/D259/D267 requirements and incomplete real-device/private-mode support evidence. Full retained Chromium rerun and exact-target fast/static comparison are running sequentially. [webkit-controls.log](https://git.kayg.org/attachments/94f6a106-3052-467a-a43d-606d3d007b48)
Author
Owner

Independent review production functional matrices completed on the target UI: Chromium 32 pass / 0 fail; Firefox 27 pass / 5 fail; WebKit 23 pass / 9 fail. Timing specifications excluded; no performance claim from build-host runs. Firefox failures comprise unsupported CDP diagnostics, target-engine passkey reenrollment limitations, and an established-WebSocket offline-emulation assumption. WebKit also has unresolved offline/fixture cases; its isolated touch finding is already recorded separately.

The strengthened storage/reconnect/reload/logout control completes every phase in Chromium, Firefox, and WebKit: all layout/drawing, IndexedDB, OPFS, and public-only Cache checks complete without other failures; seven soft identity assertions per engine reproduce the single inherited hint-key finding R250-03. Dedicated touch controls pass 2/2 in Chromium and Firefox, fail 2/2 in WebKit. Exact-head final fast is through native tests and x86 static linkage, now compiling the second architecture. Static-binary and merge-base UI repeats remain pending. Review tests only, current review head 10b0fffcd; no implementation changes, push, or deployment.

Independent review production functional matrices completed on the target UI: Chromium 32 pass / 0 fail; Firefox 27 pass / 5 fail; WebKit 23 pass / 9 fail. Timing specifications excluded; no performance claim from build-host runs. Firefox failures comprise unsupported CDP diagnostics, target-engine passkey reenrollment limitations, and an established-WebSocket offline-emulation assumption. WebKit also has unresolved offline/fixture cases; its isolated touch finding is already recorded separately. The strengthened storage/reconnect/reload/logout control completes every phase in Chromium, Firefox, and WebKit: all layout/drawing, IndexedDB, OPFS, and public-only Cache checks complete without other failures; seven soft identity assertions per engine reproduce the single inherited hint-key finding R250-03. Dedicated touch controls pass 2/2 in Chromium and Firefox, fail 2/2 in WebKit. Exact-head final fast is through native tests and x86 static linkage, now compiling the second architecture. Static-binary and merge-base UI repeats remain pending. Review tests only, current review head 10b0fffcd; no implementation changes, push, or deployment.
Author
Owner

Independent verification complete. Verdict: do not merge. Reproduced defects: P0=0, P1=1, P2=3, P3=0.

Target 1543f3fb034bd37d5797f9474bf327c7eb8dc217, merge base 2fb412d01dcecb81f1f556d18d0350e70644a615. Test-only review branch review-layout-per-tab-250, head ea22fc9ce48beca4ca2d6ce4e8ff5c0edd39f5e4. No implementation fixes, push, deployment, or issue closure.

  • R250-02 P1 — original-session binding: main.ts:663–672, connection.ts:455–476, canvas/model/server-store.ts. A suspended tab misses the notice, real logout revokes account A, and a later valid account B session supplies the reconnect cookie. The original A legacy import is then accepted by B's server session. Shipping static binary + production UI reproduces 3/3: B revision 1 becomes 2 and acquires A's layout reference. Failing test a suspended original-account import cannot be admitted by a different account session (7e4d38920). Server revocation controls passing does not cover this browser lifetime transition.
  • R250-01 P2 — distinct unsent fields coalesce: canvas/model/journal.ts:13–15,131–140. Valid view/column pairs a//b and a//b have the same coalescing key; one accepted weight edit disappears after confirmation. Failing test distinct view and column identifiers cannot supersede each other's unsent weights (06e297ce2), expected weights 2/3, actual 1/3.
  • R250-03 P2 — inherited identity storage: hints.ts:33–47, account-storage.ts:29–58. Sign-in/close writes tracer.hints.<account UUID> and successful logout cleanup leaves it. Deterministic unit failure plus all-storage production controls in all three engines confirm it. This is inherited and requires owner reconciliation of the hint exception with the brief's zero identity writes / D245 requirement. Failing test sign-in and layout-close hints cannot retain the account identifier after sign-out (194a39885); browser control refined in 10b0fffcd. Every scenario finishes; the seven soft assertions per engine are the same hint-key finding. Layout/drawing storage, IndexedDB, OPFS, and public-only Cache checks have no other failure.
  • R250-04 P2 — inherited WebKit touch split: core-screen.ts:938–940,999–1022, exact cause not assigned. Fresh/reloaded production WebKit touch controls both remain at one window after tapping enabled Split right. Shipping binary target UI fails 2/2; merge-base UI fails 2/2; Chromium and Firefox pass 2/2 each. Event traces receive pointer/touch down/up/end but no click. No network interception/offline emulation. Failing tests touching Split right creates a second window without network interception (reload=false/true) (fbd882ca9, event/screenshot evidence ea22fc9ce). These are Linux Playwright results, not actual iPhone/PWA claims.

Qualification gaps, separate from reproduced defect counts: the encoded 32 MiB queue estimate is not a qualified heap bound; heap ×3/×10, task budgets, D259/D267 need orchestrator-run perf-VM evidence (layout-queue-perf.spec.ts and the recovery qualification). No reviewer perf runs made. Actual iPhone/PWA/private-mode and remaining engine harness/offline cases also remain unqualified. No invented missing-artifact or budget failure test.

Functional evidence: focused current replacement tests 60 pass / 0 fail / 699 assertions. The two new unit regressions intentionally fail (0 pass / 2 fail / 6 assertions). Retained production matrix: Chromium 32/32 pass, Firefox 27 pass / 5 fail, WebKit 23 pass / 9 fail. Unsupported CDP/mobile-wheel diagnostics, target-engine enrollment limitations, and unresolved fixture/offline assumptions are explicitly separated from confirmed product findings. Earlier R1/R2/R3 source tests were rerun unchanged; removed storage modules/exports prevent loading, so they are not claimed as behavioral passes. Coverage mapping attached.

Exact untouched job head scripts/verify fast: exit 0. Initial default-root attempt hit the Unix socket fixture path limit; final complete run uses the short fixture root with no source change. Same-recipe stripped static x86 head/base: 21,431,472 / 21,431,472 bytes, delta 0, byte-identical, SHA256 159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194.

Verbatim gate summary excerpts (complete output attached; these build-host durations are not performance qualification):

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [400.00ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [84.00ms]

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [498.00ms]

 395 pass
 0 fail
 22197 expect() calls
Ran 395 tests across 66 files. [40.23s]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [331.00ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [332.00ms]

 39 pass
 0 fail
 50325 expect() calls
Ran 39 tests across 10 files. [4.87s]

Tracer check and strict review-spec type checks pass. Review checkout is clean. The temporary baseline worktree, Cargo target directory, and owned runtime roots have been removed; owned binary/browser process check found zero remaining. Evidence remains outside the repository; the test patch is attached because this review must not push.

verify-fast-final.log
gate-summary.txt
size-comparison.json
review-tests.patch
findings.md
coverage.md
static-session.log
static-touch.log
base-touch.log
touch-webkit-reload-false.png
touch-webkit-reload-false.png

The two images above are target production UI, then merge-base production UI.

Final verdict: do not merge; P0=0, P1=1, P2=3, P3=0; review head ea22fc9ce4.

Independent verification complete. **Verdict: do not merge. Reproduced defects: P0=0, P1=1, P2=3, P3=0.** Target `1543f3fb034bd37d5797f9474bf327c7eb8dc217`, merge base `2fb412d01dcecb81f1f556d18d0350e70644a615`. Test-only review branch `review-layout-per-tab-250`, head `ea22fc9ce48beca4ca2d6ce4e8ff5c0edd39f5e4`. No implementation fixes, push, deployment, or issue closure. - **R250-02 P1 — original-session binding:** `main.ts:663–672`, `connection.ts:455–476`, `canvas/model/server-store.ts`. A suspended tab misses the notice, real logout revokes account A, and a later valid account B session supplies the reconnect cookie. The original A legacy import is then accepted by B's server session. Shipping static binary + production UI reproduces 3/3: B revision 1 becomes 2 and acquires A's layout reference. Failing test `a suspended original-account import cannot be admitted by a different account session` (7e4d38920). Server revocation controls passing does not cover this browser lifetime transition. - **R250-01 P2 — distinct unsent fields coalesce:** `canvas/model/journal.ts:13–15,131–140`. Valid view/column pairs `a`/`/b` and `a/`/`b` have the same coalescing key; one accepted weight edit disappears after confirmation. Failing test `distinct view and column identifiers cannot supersede each other's unsent weights` (06e297ce2), expected weights 2/3, actual 1/3. - **R250-03 P2 — inherited identity storage:** `hints.ts:33–47`, `account-storage.ts:29–58`. Sign-in/close writes `tracer.hints.<account UUID>` and successful logout cleanup leaves it. Deterministic unit failure plus all-storage production controls in all three engines confirm it. This is inherited and requires owner reconciliation of the hint exception with the brief's zero identity writes / D245 requirement. Failing test `sign-in and layout-close hints cannot retain the account identifier after sign-out` (194a39885); browser control refined in 10b0fffcd. Every scenario finishes; the seven soft assertions per engine are the same hint-key finding. Layout/drawing storage, IndexedDB, OPFS, and public-only Cache checks have no other failure. - **R250-04 P2 — inherited WebKit touch split:** `core-screen.ts:938–940,999–1022`, exact cause not assigned. Fresh/reloaded production WebKit touch controls both remain at one window after tapping enabled Split right. Shipping binary target UI fails 2/2; merge-base UI fails 2/2; Chromium and Firefox pass 2/2 each. Event traces receive pointer/touch down/up/end but no click. No network interception/offline emulation. Failing tests `touching Split right creates a second window without network interception (reload=false/true)` (fbd882ca9, event/screenshot evidence ea22fc9ce). These are Linux Playwright results, not actual iPhone/PWA claims. Qualification gaps, separate from reproduced defect counts: the encoded 32 MiB queue estimate is not a qualified heap bound; heap ×3/×10, task budgets, D259/D267 need orchestrator-run perf-VM evidence (`layout-queue-perf.spec.ts` and the recovery qualification). No reviewer perf runs made. Actual iPhone/PWA/private-mode and remaining engine harness/offline cases also remain unqualified. No invented missing-artifact or budget failure test. Functional evidence: focused current replacement tests 60 pass / 0 fail / 699 assertions. The two new unit regressions intentionally fail (0 pass / 2 fail / 6 assertions). Retained production matrix: Chromium 32/32 pass, Firefox 27 pass / 5 fail, WebKit 23 pass / 9 fail. Unsupported CDP/mobile-wheel diagnostics, target-engine enrollment limitations, and unresolved fixture/offline assumptions are explicitly separated from confirmed product findings. Earlier R1/R2/R3 source tests were rerun unchanged; removed storage modules/exports prevent loading, so they are not claimed as behavioral passes. Coverage mapping attached. Exact untouched job head `scripts/verify fast`: **exit 0**. Initial default-root attempt hit the Unix socket fixture path limit; final complete run uses the short fixture root with no source change. Same-recipe stripped static x86 head/base: **21,431,472 / 21,431,472 bytes, delta 0, byte-identical**, SHA256 `159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194`. Verbatim gate summary excerpts (complete output attached; these build-host durations are not performance qualification): ```text 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [400.00ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [84.00ms] +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [498.00ms] 395 pass 0 fail 22197 expect() calls Ran 395 tests across 66 files. [40.23s] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [331.00ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [332.00ms] 39 pass 0 fail 50325 expect() calls Ran 39 tests across 10 files. [4.87s] ``` Tracer check and strict review-spec type checks pass. Review checkout is clean. The temporary baseline worktree, Cargo target directory, and owned runtime roots have been removed; owned binary/browser process check found zero remaining. Evidence remains outside the repository; the test patch is attached because this review must not push. [verify-fast-final.log](https://git.kayg.org/attachments/c4008e5a-9698-4c9e-b962-8dd62fc21c35) [gate-summary.txt](https://git.kayg.org/attachments/a0799d09-d2f7-4e5d-8b54-32ee1b97e8d0) [size-comparison.json](https://git.kayg.org/attachments/62bf9c41-c561-40ea-8a70-f820d8b69d47) [review-tests.patch](https://git.kayg.org/attachments/2388a7ce-db9e-4d61-bd79-9528d8f4bc97) [findings.md](https://git.kayg.org/attachments/baec29bc-1736-4676-b04c-062a287cf174) [coverage.md](https://git.kayg.org/attachments/07540063-61ec-4997-bf54-6c11f5c557d7) [static-session.log](https://git.kayg.org/attachments/dec93903-31ab-4f72-8083-9f6a2d9d8dd5) [static-touch.log](https://git.kayg.org/attachments/7cee728b-f554-4c3e-a03d-ed8158db8cba) [base-touch.log](https://git.kayg.org/attachments/21eb5d15-a2cf-4614-8bbf-0915b2dcb010) ![touch-webkit-reload-false.png](https://git.kayg.org/attachments/7ecec1fe-cd38-47b0-9c0b-922d0db32c16) ![touch-webkit-reload-false.png](https://git.kayg.org/attachments/59dd978a-90f4-4e2b-89f4-d269cdc8e10a) The two images above are target production UI, then merge-base production UI. Final verdict: do not merge; P0=0, P1=1, P2=3, P3=0; review head ea22fc9ce48beca4ca2d6ce4e8ff5c0edd39f5e4.
Author
Owner

Fix round 1 started on clean existing worktree /home/agent/wt-infraternal/layout-per-tab-250, branch layout-per-tab-250, base 1543f3fb03. Reading D312, approved failure table, handoff and review ea22fc9ce; merging unchanged failing review tests first. Scope: session-incarnation admission fence, distinct-field coalescing, identity-free hints/cleanup, shared touch control, perf fixture bookkeeping and rebuilt relay kit. No deployment or dev merge.

Fix round 1 started on clean existing worktree /home/agent/wt-infraternal/layout-per-tab-250, branch layout-per-tab-250, base 1543f3fb034bd37d5797f9474bf327c7eb8dc217. Reading D312, approved failure table, handoff and review ea22fc9ce; merging unchanged failing review tests first. Scope: session-incarnation admission fence, distinct-field coalescing, identity-free hints/cleanup, shared touch control, perf fixture bookkeeping and rebuilt relay kit. No deployment or dev merge.
Author
Owner

Merged review ea22fc9ce unchanged. Reproduced both unit failures before repair (0 pass / 2 fail / 6 assertions).

R250-01 repaired in bf669e4af: tuple-encoded coalescing keys preserve distinct identifier boundaries; only adjacent unsent same-field supersession remains. Focused model suite: 85 pass / 0 fail / 8991 assertions; tracer check passes.

R250-03 repaired in adc01d04a: hints persist anonymous device-wide counters, never an account-derived key/value; accounts share the teaching budget. Sign-out sweeps legacy tracer.hints. keys. Unchanged identity regression plus hint/cleanup controls: 11 pass / 0 fail / 27 assertions; tracer check passes.

R250-02 contract implementation follows the supplied decision: Hello capability bit 4 requests an additive Welcome session_incarnation; both layout calls carry it, missing/mismatched values get layout_session_changed before receipt lookup or commit. Server label is domain-separated from credentials and lives only in RAM/wire. No new dependency or database migration. Client-only and account-only binding rejected for suspended-tab and same-account reauthentication cases respectively. Shared touch focus fix and production tests remain in progress.

The build host permits unprivileged user+mount namespaces. /run/infraternal is absent outside the namespace; mounting a private tmpfs on /run first permits creating it and mounting the required private 0700 tmpfs without changing the host. Functional single-case kit qualification will use that layout, with no performance claim from this host.

Merged review ea22fc9ce unchanged. Reproduced both unit failures before repair (0 pass / 2 fail / 6 assertions). R250-01 repaired in bf669e4af: tuple-encoded coalescing keys preserve distinct identifier boundaries; only adjacent unsent same-field supersession remains. Focused model suite: 85 pass / 0 fail / 8991 assertions; tracer check passes. R250-03 repaired in adc01d04a: hints persist anonymous device-wide counters, never an account-derived key/value; accounts share the teaching budget. Sign-out sweeps legacy tracer.hints.<account> keys. Unchanged identity regression plus hint/cleanup controls: 11 pass / 0 fail / 27 assertions; tracer check passes. R250-02 contract implementation follows the supplied decision: Hello capability bit 4 requests an additive Welcome session_incarnation; both layout calls carry it, missing/mismatched values get layout_session_changed before receipt lookup or commit. Server label is domain-separated from credentials and lives only in RAM/wire. No new dependency or database migration. Client-only and account-only binding rejected for suspended-tab and same-account reauthentication cases respectively. Shared touch focus fix and production tests remain in progress. The build host permits unprivileged user+mount namespaces. /run/infraternal is absent outside the namespace; mounting a private tmpfs on /run first permits creating it and mounting the required private 0700 tmpfs without changing the host. Functional single-case kit qualification will use that layout, with no performance claim from this host.
Author
Owner

R250-02 repaired in 0708a2c7b (shared codec/contract vectors) and 16ac9d19f (admission/client lifetime). Both codecs retain the legacy Welcome vector and add the negotiated incarnation suffix and layout_session_changed refusal vectors. Server checks precede receipts/commit; client drops the queue without sending on a replacement incarnation. Authenticated HTTP seeds the original lifetime before the first socket, covering the startup cookie-change boundary too. The per-socket label is cached; the admission parser borrows it without constructing another JSON tree.

Production Chromium: unchanged different-account suspended-tab regression PASS; added same-account sign-out/sign-in suspended-tab control PASS; unchanged all-storage review control PASS. Real native socket test (including absent/foreign incarnation refusals), touched-crate clippy and strict tracer/real-spec checks PASS. Review's five added files are byte-unchanged from ea22fc9ce.

Mapped-root build-host fixture limitation: the private tmpfs namespace works, but PTY open returns resource_unavailable. Direct unshare --user --map-root-user --mount python3 os.setgroups([0]) returns EPERM; crates/infraternal-shim/src/pty.rs requires that call before spawning the root session. No production privilege change is made to get a local perf result. The original driver's /proc/1/ns/mnt guard independently returns EACCES for mapped root; the repaired guard verifies a private /run/infraternal tmpfs and the single-entry mapped-root uid map when host-init inspection is unavailable. Perf-VM root qualification remains with the orchestrator; no build-host timing is evidence.

R250-02 repaired in 0708a2c7b (shared codec/contract vectors) and 16ac9d19f (admission/client lifetime). Both codecs retain the legacy Welcome vector and add the negotiated incarnation suffix and layout_session_changed refusal vectors. Server checks precede receipts/commit; client drops the queue without sending on a replacement incarnation. Authenticated HTTP seeds the original lifetime before the first socket, covering the startup cookie-change boundary too. The per-socket label is cached; the admission parser borrows it without constructing another JSON tree. Production Chromium: unchanged different-account suspended-tab regression PASS; added same-account sign-out/sign-in suspended-tab control PASS; unchanged all-storage review control PASS. Real native socket test (including absent/foreign incarnation refusals), touched-crate clippy and strict tracer/real-spec checks PASS. Review's five added files are byte-unchanged from ea22fc9ce. Mapped-root build-host fixture limitation: the private tmpfs namespace works, but PTY open returns resource_unavailable. Direct unshare --user --map-root-user --mount python3 os.setgroups([0]) returns EPERM; crates/infraternal-shim/src/pty.rs requires that call before spawning the root session. No production privilege change is made to get a local perf result. The original driver's /proc/1/ns/mnt guard independently returns EACCES for mapped root; the repaired guard verifies a private /run/infraternal tmpfs and the single-entry mapped-root uid map when host-init inspection is unavailable. Perf-VM root qualification remains with the orchestrator; no build-host timing is evidence.
Author
Owner

R250-04: shared toolbar repair pushed at 8cf7451e3. Production tests pass in Chromium and WebKit: five per engine, including unchanged fresh/reload touch tests and unchanged storage review. Focus stays in the terminal after a touch Tab; a touch Split right creates exactly one additional window. Production screenshots in both themes below; visual judgment is left to independent review.

Perf bookkeeping repair 88203b830 records explicit and server-restored attachment metadata even in lean mode. The exact attached-session count is unchanged, with an additional per-window live precondition. Three bookkeeping/isolation controls pass; strict TypeScript checks pass. Guard c74a395e2 validates private tmpfs plus namespace/mapped-root identity. Build-host setgroups restriction remains as previously recorded; no timing claim.

Gate additions ad793dce2: selected tests are 9 pass / 0 fail / 27 assertions (the commit message incorrectly says sixteen). Retained full layout browser suites and static image comparisons are next.

touch-webkit-ink-393.png
touch-webkit-paper-393.png
touch-chromium-ink-375.png
touch-chromium-paper-1440.png
touch-webkit.log
touch-chromium.log

R250-04: shared toolbar repair pushed at 8cf7451e3. Production tests pass in Chromium and WebKit: five per engine, including unchanged fresh/reload touch tests and unchanged storage review. Focus stays in the terminal after a touch Tab; a touch Split right creates exactly one additional window. Production screenshots in both themes below; visual judgment is left to independent review. Perf bookkeeping repair 88203b830 records explicit and server-restored attachment metadata even in lean mode. The exact attached-session count is unchanged, with an additional per-window live precondition. Three bookkeeping/isolation controls pass; strict TypeScript checks pass. Guard c74a395e2 validates private tmpfs plus namespace/mapped-root identity. Build-host setgroups restriction remains as previously recorded; no timing claim. Gate additions ad793dce2: selected tests are 9 pass / 0 fail / 27 assertions (the commit message incorrectly says sixteen). Retained full layout browser suites and static image comparisons are next. ![touch-webkit-ink-393.png](https://git.kayg.org/attachments/dcb74072-b8d1-4bff-9ba2-fa08ffef76a0) ![touch-webkit-paper-393.png](https://git.kayg.org/attachments/0487154a-c628-44ab-80b8-b63f1d4d217d) ![touch-chromium-ink-375.png](https://git.kayg.org/attachments/817e7aa7-43cf-4c64-8d0e-ee5d5ffde93a) ![touch-chromium-paper-1440.png](https://git.kayg.org/attachments/c979c038-9ea3-4729-a1e7-9cdc47f307a0) [touch-webkit.log](https://git.kayg.org/attachments/2379e4b1-980f-4d7e-9d85-7ee5697a5430) [touch-chromium.log](https://git.kayg.org/attachments/ddc53d28-ad2d-4f4d-81f4-acfe82e2be24)
Author
Owner

Retained production layout suite on 57ee7ff836: Chromium 40 PASS, 1 skipped (perf-VM-only latency row). Includes every earlier functional review test and both suspended-session cases. The five new review files are byte-unchanged from ea22fc9ce. Protocol adapter correction 57ee7ff83 only adds incarnation to layout calls, preserving unrelated action schemas.

Focused review/codec/lifetime controls: 11 PASS / 0 FAIL / 123 assertions.

WebKit broader functional run is using external enrollment plumbing only. CDP lifecycle/network-diagnostic rows and the mouse.wheel-dependent mobile sync row are Chromium-only and excluded in this engine run; they all passed above in Chromium. Targeted unchanged WebKit touch/storage tests already pass. No build-host timing or heap claim.

full-chromium.log
mapped-root-groups.log
round-one-regressions.log

Retained production layout suite on 57ee7ff8366aab8af4d1c8d725c2e9f7a20b5e48: Chromium 40 PASS, 1 skipped (perf-VM-only latency row). Includes every earlier functional review test and both suspended-session cases. The five new review files are byte-unchanged from ea22fc9ce. Protocol adapter correction 57ee7ff83 only adds incarnation to layout calls, preserving unrelated action schemas. Focused review/codec/lifetime controls: 11 PASS / 0 FAIL / 123 assertions. WebKit broader functional run is using external enrollment plumbing only. CDP lifecycle/network-diagnostic rows and the mouse.wheel-dependent mobile sync row are Chromium-only and excluded in this engine run; they all passed above in Chromium. Targeted unchanged WebKit touch/storage tests already pass. No build-host timing or heap claim. [full-chromium.log](https://git.kayg.org/attachments/dba963aa-7fb7-44f9-b3ca-86d2424e0ee0) [mapped-root-groups.log](https://git.kayg.org/attachments/41cbda16-cbd0-4afc-9d37-36b3008d20b9) [round-one-regressions.log](https://git.kayg.org/attachments/be8bdc91-28c7-4178-ad0c-557dc89a7800)
Author
Owner

Production WebKit full selected suite: 29 passed, six failed, one perf-only skip. Five CDP lifecycle/network or mobile mouse.wheel cases excluded, all pass in the full Chromium run (40 pass, one perf-only skip). External enrollment plumbing patch attached; assertions unchanged.
Six-case recheck against prior kit: three pass (phone layout motion, offline close race, all-view removal); three fail (old touch split, offline reload internal navigation error, logout inert assertion).
Same six-case recheck on head: all-view removal passes; five fail (temporary notice already hidden, offline reload internal navigation error, logout inert assertion, connection-status CSS transforms counted as layout motion, offline close race count).
The original terminal-typing failure was not repeated; the temporary-notice assertion fails later instead. Initial startup failure was not repeated. Do not claim the broad WebKit suite is green or all failures are baseline-equivalent.
Targeted unchanged WebKit touch/storage review plus both-theme focus controls: five pass. Same five pass in Chromium. Full Chromium retained suite: 40 pass, one perf-only skip.
Supplemental real daemon restart, current debug executable + production UI, normal UID with transient user service and explicit user-bus address: FUNCTIONAL_RESTART sessions=1 mode=daemon PASS. No timing measurements enabled; exact attachment count and live terminal/queued typing recovery assertions remain intact.
Requested mapped-root namespace case is blocked by host setgroups EPERM, separately recorded; no production privilege workaround. Root perf VM qualification remains open.

full-webkit.log
failure-summary.txt
webkit-prior-recheck.log
webkit-head-recheck.log
engine-enrollment.patch
functional-restart.log
webkit-qualification.txt

Pinned baseline/head static measurements are running sequentially in one build slot. No final gate claim yet.

Production WebKit full selected suite: 29 passed, six failed, one perf-only skip. Five CDP lifecycle/network or mobile mouse.wheel cases excluded, all pass in the full Chromium run (40 pass, one perf-only skip). External enrollment plumbing patch attached; assertions unchanged. Six-case recheck against prior kit: three pass (phone layout motion, offline close race, all-view removal); three fail (old touch split, offline reload internal navigation error, logout inert assertion). Same six-case recheck on head: all-view removal passes; five fail (temporary notice already hidden, offline reload internal navigation error, logout inert assertion, connection-status CSS transforms counted as layout motion, offline close race count). The original terminal-typing failure was not repeated; the temporary-notice assertion fails later instead. Initial startup failure was not repeated. Do not claim the broad WebKit suite is green or all failures are baseline-equivalent. Targeted unchanged WebKit touch/storage review plus both-theme focus controls: five pass. Same five pass in Chromium. Full Chromium retained suite: 40 pass, one perf-only skip. Supplemental real daemon restart, current debug executable + production UI, normal UID with transient user service and explicit user-bus address: FUNCTIONAL_RESTART sessions=1 mode=daemon PASS. No timing measurements enabled; exact attachment count and live terminal/queued typing recovery assertions remain intact. Requested mapped-root namespace case is blocked by host setgroups EPERM, separately recorded; no production privilege workaround. Root perf VM qualification remains open. [full-webkit.log](https://git.kayg.org/attachments/d0abe46b-8dd3-4f6e-9986-b0bd53df213b) [failure-summary.txt](https://git.kayg.org/attachments/1eb702ef-018c-465c-9803-2824caecb2fb) [webkit-prior-recheck.log](https://git.kayg.org/attachments/644c28e8-481a-45b2-a660-1f616b58e42b) [webkit-head-recheck.log](https://git.kayg.org/attachments/bc320877-c1a4-43d6-adf9-71145699391c) [engine-enrollment.patch](https://git.kayg.org/attachments/1e1b2b43-b9d7-43e4-a117-89fa5c728028) [functional-restart.log](https://git.kayg.org/attachments/b098c1df-4f52-48b8-91a2-f7f72272f23c) [webkit-qualification.txt](https://git.kayg.org/attachments/31b64927-ad53-4167-a9bf-05d3029d3c7b) Pinned baseline/head static measurements are running sequentially in one build slot. No final gate claim yet.
Author
Owner

D243 fresh pinned baseline builds complete on 8by64-compute02, sequentially in one build slot, source origin/dev 2fb412d01d.

x86_64-unknown-linux-musl: 21,431,472 bytes; sha256 159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194.
aarch64-unknown-linux-musl: 19,605,896 bytes. Both match the existing exact caps. Head builds follow with the identical scripts/static-cargo build --locked --release --package infraternal --target recipe and job target directory. Comparison log and both head checksums will be attached after completion.

D243 fresh pinned baseline builds complete on 8by64-compute02, sequentially in one build slot, source origin/dev 2fb412d01dcecb81f1f556d18d0350e70644a615. x86_64-unknown-linux-musl: 21,431,472 bytes; sha256 159ed851c60e93a2e2960cab0ab101c16e22f6c532b96039bb2b0206d381f194. aarch64-unknown-linux-musl: 19,605,896 bytes. Both match the existing exact caps. Head builds follow with the identical scripts/static-cargo build --locked --release --package infraternal --target <target> recipe and job target directory. Comparison log and both head checksums will be attached after completion.
Author
Owner

R250-02 conservative capability-transition control added at c2fec6e5c: if a queued store has no original incarnation, it must discard its queue before adopting a newly advertised label. An empty store can still adopt its first label. New regression: before 2 pass / 1 fail (one call sent instead of zero); after, with unchanged coalescing/privacy controls, 5 pass / 0 fail / 23 assertions. Tracer compiler check passes. This is TypeScript-only; native input trees are unchanged during the static image comparison.

unbound-before.log
unbound-after.log

Fresh head x86_64 static image: 21,434,288 bytes, +2,816 versus origin/dev 2fb412d01. ARM head build remains in progress; both final exact caps will be set after it completes.

R250-02 conservative capability-transition control added at c2fec6e5c: if a queued store has no original incarnation, it must discard its queue before adopting a newly advertised label. An empty store can still adopt its first label. New regression: before 2 pass / 1 fail (one call sent instead of zero); after, with unchanged coalescing/privacy controls, 5 pass / 0 fail / 23 assertions. Tracer compiler check passes. This is TypeScript-only; native input trees are unchanged during the static image comparison. [unbound-before.log](https://git.kayg.org/attachments/9c022fdb-3197-4320-a6d2-caaa03331b13) [unbound-after.log](https://git.kayg.org/attachments/40cf95b3-59cc-4046-9778-ddb8845e97de) Fresh head x86_64 static image: 21,434,288 bytes, +2,816 versus origin/dev 2fb412d01. ARM head build remains in progress; both final exact caps will be set after it completes.
Author
Owner

Author admission-parser audit found that my borrowed-only session-label field rejected valid JSON escapes. Regression fails before the correction (0 pass / 1 fail). Fixed in 42418c0a6 with the existing borrowed-or-owned decoder: ordinary JSON labels stay borrowed, escaped labels decode to the same value with owned storage only when needed. Reject a second request tree and rejecting standard JSON string encodings. No new dependency or feature. Two decode/borrow controls, all 14 canvas-plugin unit tests, fmt and touched-crate clippy PASS.

escaped-binding-before.log
escaped-binding-after.log

Both native head images are being rebuilt after this correction, sequentially in the build slot. Earlier preliminary head sizes are superseded by those final measurements; baseline images remain 21,431,472 / 19,605,896 bytes.

Author admission-parser audit found that my borrowed-only session-label field rejected valid JSON escapes. Regression fails before the correction (0 pass / 1 fail). Fixed in 42418c0a6 with the existing borrowed-or-owned decoder: ordinary JSON labels stay borrowed, escaped labels decode to the same value with owned storage only when needed. Reject a second request tree and rejecting standard JSON string encodings. No new dependency or feature. Two decode/borrow controls, all 14 canvas-plugin unit tests, fmt and touched-crate clippy PASS. [escaped-binding-before.log](https://git.kayg.org/attachments/f499e8e8-9bdc-4f7c-adc0-1badad43fab9) [escaped-binding-after.log](https://git.kayg.org/attachments/0dcc1e9d-7040-43f3-ba22-29a78f3227cd) Both native head images are being rebuilt after this correction, sequentially in the build slot. Earlier preliminary head sizes are superseded by those final measurements; baseline images remain 21,431,472 / 19,605,896 bytes.
Author
Owner

D243 complete: caps and PROCESS table pushed at 7e2490f07, native source 42418c0a6. Fresh pinned static images on 8by64-compute02, one target at a time in the build slot:

Target origin/dev 2fb412d01 Final head Delta
x86_64-unknown-linux-musl 21,431,472 B 21,434,576 B +3,104 B
aarch64-unknown-linux-musl 19,605,896 B 19,610,728 B +4,832 B

Both deltas are below 16 KiB. No dependency/feature/release-recipe change; no cap allowance. Final comparison JSON carries all four SHA256s. The initial comparison log also contains superseded preliminary head images; static-final-head.log and the JSON are the post-parser-correction results used for the caps and kit.

final-size-comparison.json
static-comparison.log
static-final-head.log

Final scripts/verify fast is running on 7e2490f07.

D243 complete: caps and PROCESS table pushed at 7e2490f07, native source 42418c0a6. Fresh pinned static images on 8by64-compute02, one target at a time in the build slot: | Target | origin/dev 2fb412d01 | Final head | Delta | | --- | ---: | ---: | ---: | | x86_64-unknown-linux-musl | 21,431,472 B | 21,434,576 B | +3,104 B | | aarch64-unknown-linux-musl | 19,605,896 B | 19,610,728 B | +4,832 B | Both deltas are below 16 KiB. No dependency/feature/release-recipe change; no cap allowance. Final comparison JSON carries all four SHA256s. The initial comparison log also contains superseded preliminary head images; static-final-head.log and the JSON are the post-parser-correction results used for the caps and kit. [final-size-comparison.json](https://git.kayg.org/attachments/9d6a9a83-11c0-4734-ba57-224bbc1943bf) [static-comparison.log](https://git.kayg.org/attachments/66fae6d8-938c-42ca-8308-33406333b4ae) [static-final-head.log](https://git.kayg.org/attachments/4e9d962e-649c-4401-b0b4-46856ada9ea9) Final scripts/verify fast is running on 7e2490f07.
Author
Owner

Final-gate attempt on 7e2490f07 hit an environment-path failure: daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up calls UnixListener::bind on a 111-byte socket path under the selected TMPDIR; SUN_LEN rejects it. This is not waived as a host-load exception. No source change is needed. A private /home/agent/.cache/l250f alias points into this job’s scratch runtime, reducing that socket path to 97 bytes. The exact original workspace test binary then passes (1 pass / 168 filtered). The full gate will be rerun with the short alias; CARGO_TARGET_DIR remains the required job target.

gate-runtime-failure.txt
vanished-short-runtime.log

Final-gate attempt on 7e2490f07 hit an environment-path failure: daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up calls UnixListener::bind on a 111-byte socket path under the selected TMPDIR; SUN_LEN rejects it. This is not waived as a host-load exception. No source change is needed. A private /home/agent/.cache/l250f alias points into this job’s scratch runtime, reducing that socket path to 97 bytes. The exact original workspace test binary then passes (1 pass / 168 filtered). The full gate will be rerun with the short alias; CARGO_TARGET_DIR remains the required job target. [gate-runtime-failure.txt](https://git.kayg.org/attachments/62369799-e988-40da-9ca5-9cdba1b9eae2) [vanished-short-runtime.log](https://git.kayg.org/attachments/68bc7ce1-53a5-44e4-a492-ca701065129d)
Author
Owner

The short-runtime symlink fixed SUN_LEN but correctly failed eight restart path-trust controls (symlink-parent refusal, canonical executable identity and parent escape checks). No tests or source were changed. Replaced that test configuration with a short real private directory under the scratch root, /home/agent/.cache/codex-scratch/l (job-owned, removed at finish). Original test binary restart controls now pass: 19 passed, 0 failed, 85 filtered. The full gate is being rerun with this direct path; neither failed attempt is waived.
restart-direct-runtime.log

The short-runtime symlink fixed SUN_LEN but correctly failed eight restart path-trust controls (symlink-parent refusal, canonical executable identity and parent escape checks). No tests or source were changed. Replaced that test configuration with a short real private directory under the scratch root, /home/agent/.cache/codex-scratch/l (job-owned, removed at finish). Original test binary restart controls now pass: 19 passed, 0 failed, 85 filtered. The full gate is being rerun with this direct path; neither failed attempt is waived. [restart-direct-runtime.log](https://git.kayg.org/attachments/a1d83e0e-baee-43db-a824-0bb6b5361c15)
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 1/11.


==> Repository artifact size gate
repository artifact gate: PASS (82 changed path(s), merge base 2fb412d01dce)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.673s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.082s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [232.39ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [238.85ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [186.77ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [665.00ms]
PASS proxy_forwarding samples=3 timed=false

==> fmt
(fmt: 3s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-fe1c5abfd68beec3)

running 37 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.23s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-0a149f42b54b04db)

running 104 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.01s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.62s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_agent-f4f0113fecf22aee)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s

(CLI plugin compile-out: 29s)

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.33s
(clippy: 1s)

==> SSH runtime test helper
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.23s
(SSH runtime test helper: 0s)

==> real-binary fixture paths
...
----------------------------------------------------------------------
Ran 3 tests in 0.007s

OK
(real-binary fixture paths: 0s)

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.23s
     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-6fb500f025e14506)

running 104 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok
test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok
test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.18s

     Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_daemon-07be34f79332b165)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.35s

     Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_queues-230c59a5cd906663)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.42s

     Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_review-84c86525ad0fea2c)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.05s

     Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_sessions-03d7a30371f14a27)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s

     Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_envelope-80a08214b8a5d410)

running 8 tests
test a_missing_server_is_not_found_exit_4 ... ok
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review-3291d67404d26089)

running 17 tests
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_empty_no_color_is_ignored ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok
test json_help_and_version_are_envelopes_too ... ok
test no_compiled_python_is_tracked ... ok
test root_help_fits_80_columns ... ok
test root_help_lists_server_init ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test user_facing_text_never_says_agent_alone ... ok

test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s

     Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r2-23cf4131d1988fa6)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.08s

     Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r3-be7640ccd9aa03ea)

running 4 tests
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok
test signal_fixture ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/idle_canary-5d1908992b4ff473)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s

     Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/key_memory-4d4f4cc5516ea6b4)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/remote_output-9105ebfda268049c)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/replay_size.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/replay_size-012ca64e5a46eaa3)

running 1 test
test replay_fences_report_pre_resize_geometry_across_viewers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.28s

     Running tests/replay_size_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/replay_size_review-6727b43a6052c4c4)

running 1 test
test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.69s

     Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_bounds_review-ea0b23d91d052373)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s

     Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_exit_events-d98ed6fbf136b0d7)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.20s

     Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_retention-8b939159efa2d0ab)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.69s

     Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/setup_output-702013ba02916bdd)

running 6 tests
test setup_output_keeps_legacy_and_versioned_readers ... ok
test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok
test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok
test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok
test setup_token_reads_a_traversable_directory_without_listing_access ... ok
test unreadable_system_service_data_prints_one_sudo_command_line ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/shim.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shim-30417b82dff06cc8)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.01s

     Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.56s

     Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/user_host.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/user_host-4bee401db2fda08c)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/vt_credit-dd383ed03c38b306)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.16s

     Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/vt_reconnect-a0009109e49304ab)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.88s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_agent-b93583fbcebe1fd6)

running 169 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_geometry_is_frozen_before_queued_resize_and_delayed_output ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok
test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 1/11. ```text ==> Repository artifact size gate repository artifact gate: PASS (82 changed path(s), merge base 2fb412d01dce) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.673s OK . ---------------------------------------------------------------------- Ran 1 test in 0.082s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [232.39ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [238.85ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [186.77ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [665.00ms] PASS proxy_forwarding samples=3 timed=false ==> fmt (fmt: 3s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-fe1c5abfd68beec3) running 37 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.23s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-0a149f42b54b04db) running 104 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.01s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.62s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_agent-f4f0113fecf22aee) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 76 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_ssh-b96e878b9907f3df) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 45 filtered out; finished in 0.00s (CLI plugin compile-out: 29s) ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.33s (clippy: 1s) ==> SSH runtime test helper Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.23s (SSH runtime test helper: 0s) ==> real-binary fixture paths ... ---------------------------------------------------------------------- Ran 3 tests in 0.007s OK (real-binary fixture paths: 0s) ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.23s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal-6fb500f025e14506) running 104 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test install::tests::system_units_mark_the_scope_used_by_first_run_status ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test server_data_resolution_tests::explicit_data_directory_wins_over_the_installed_service ... ok test server_data_resolution_tests::installed_service_data_directory_is_selected_when_no_override_is_given ... ok test server_data_resolution_tests::missing_install_uses_the_existing_default_directory ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 103 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.18s Running tests/agent_daemon.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_daemon-07be34f79332b165) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.35s Running tests/agent_queues.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_queues-230c59a5cd906663) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.42s Running tests/agent_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_review-84c86525ad0fea2c) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.05s Running tests/agent_sessions.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/agent_sessions-03d7a30371f14a27) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s Running tests/cli_envelope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_envelope-80a08214b8a5d410) running 8 tests test a_missing_server_is_not_found_exit_4 ... ok test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/cli_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review-3291d67404d26089) running 17 tests test a_dry_run_plan_keeps_its_line_breaks ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_empty_no_color_is_ignored ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test json_help_and_version_are_envelopes_too ... ok test no_compiled_python_is_tracked ... ok test root_help_fits_80_columns ... ok test root_help_lists_server_init ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test user_facing_text_never_says_agent_alone ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s Running tests/cli_review_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r2-23cf4131d1988fa6) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.08s Running tests/cli_review_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r3-be7640ccd9aa03ea) running 4 tests test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test signal_fixture ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/cli_review_r3_arguments.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/cli_review_r3_arguments-212cdc3ed0a05eb1) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/idle_canary.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/idle_canary-5d1908992b4ff473) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s Running tests/key_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/key_memory-4d4f4cc5516ea6b4) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/remote_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/remote_output-9105ebfda268049c) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/replay_size.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/replay_size-012ca64e5a46eaa3) running 1 test test replay_fences_report_pre_resize_geometry_across_viewers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.28s Running tests/replay_size_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/replay_size_review-6727b43a6052c4c4) running 1 test test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.69s Running tests/session_bounds_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_bounds_review-ea0b23d91d052373) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s Running tests/session_exit_events.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_exit_events-d98ed6fbf136b0d7) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.20s Running tests/session_retention.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/session_retention-8b939159efa2d0ab) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.69s Running tests/setup_output.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/setup_output-702013ba02916bdd) running 6 tests test setup_output_keeps_legacy_and_versioned_readers ... ok test setup_token_discovers_a_service_installed_through_a_versioned_binary_symlink ... ok test setup_token_finds_the_data_dir_from_a_system_service_without_flags ... ok test setup_token_permission_hint_covers_a_private_socket_in_a_readable_directory ... ok test setup_token_reads_a_traversable_directory_without_listing_access ... ok test unreadable_system_service_data_prints_one_sudo_command_line ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/shim.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shim-30417b82dff06cc8) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.01s Running tests/ssh_askpass.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ssh_askpass-16fbd1b96c4af4ca) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.56s Running tests/ssh_connector_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ssh_connector_policy-dd9b13bec3dd9638) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/user_host.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/user_host-4bee401db2fda08c) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/vt_credit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/vt_credit-dd383ed03c38b306) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.16s Running tests/vt_reconnect.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/vt_reconnect-a0009109e49304ab) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.88s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_agent-b93583fbcebe1fd6) running 169 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_geometry_is_frozen_before_queued_resize_and_delayed_output ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::reply_capacity_tests::full_reply_reservations_cannot_spend_keyboard_capacity ... ok test daemon::session_commands::reply_capacity_tests::sixteen_replies_and_eight_typing_commands_retain_their_order ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 2/11.

test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 149 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.93s

     Running tests/transport.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/transport-8f7e25a883145d8d)

running 3 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok
test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_mesh-7fce9c81f3753067)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/default_arrow-718a820b17567011)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/properties-9b39f53037898c73)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.50s

     Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/rotation_time-d8fd70ac7360bfd5)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777)

running 32 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok
test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok
test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/routing_review-6f6c1a928eb26a7f)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7)

running 14 tests
test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok
test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok
test model::tests::reference_document_has_strict_shape_and_bounds ... ok
test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok
test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok
test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok
test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok
test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok
test reducer::tests::split_divides_only_its_own_band ... ok
test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok
test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok
test socket::tests::ordinary_session_binding_borrows_and_escaped_binding_decodes_identically ... ok
test socket::tests::result_json_preserves_both_wire_shapes ... ok
test socket::tests::session_binding_accepts_json_string_escapes ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_mesh-27583060726d1618)

running 76 tests
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok

test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 8.44s

     Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/access_updates-401a785178272a85)

running 8 tests
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/authorized_local_binding-9eb78243673aa0ef)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canonical_host_binding-77332b5113aa5170)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/configuration.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/configuration-edd5af664e4aa790)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s

     Running tests/kernel.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/kernel-ae923fd8446e7953)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/naming-7ef77dd298644e0e)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s

     Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/presence-3e1bc5e55745d7e3)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_ingress_translation-c0a4032b0502fe02)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_local_delivery-1712a7f25b19bf51)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb)

running 6 tests
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test an_address_that_is_an_ip_never_becomes_a_name ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s

     Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.33s

     Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1)

running 7 tests
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s

     Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_restart_routes-012bc6e19af8712e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 2/11. ```text test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 149 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.93s Running tests/transport.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/transport-8f7e25a883145d8d) running 3 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test replacing_the_callers_descriptor_cannot_redirect_registered_io ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_mesh-7fce9c81f3753067) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/default_arrow-718a820b17567011) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/properties-9b39f53037898c73) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.50s Running tests/rotation_time.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/rotation_time-d8fd70ac7360bfd5) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_api-49f4d2771da6f777) running 32 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test host_name::tests::addresses_and_hostnames_give_a_machine_name ... ok test host_name::tests::numeric_invalid_and_unnamed_inputs_give_no_name ... ok test host_name::tests::odd_and_overlong_hostnames_give_no_name ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 31 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/routing_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/routing_review-6f6c1a928eb26a7f) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_backup-9fdc1ecb14af9cc8) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_canvas-1446da2b8a090ad7) running 14 tests test model::tests::graph_pin_coordinates_include_both_limits_but_refuse_the_next_integer ... ok test model::tests::host_id_requires_canonical_lowercase_hyphenated_text ... ok test model::tests::reference_document_has_strict_shape_and_bounds ... ok test reducer::tests::concurrent_builtin_view_creation_preserves_existing_contents ... ok test reducer::tests::independent_edits_commute_and_close_wins_in_both_orders ... ok test reducer::tests::nullable_resize_preserves_existing_values_and_absent_fields ... ok test reducer::tests::repeated_open_close_does_not_exhaust_column_capacity ... ok test reducer::tests::sample_corpus_preserves_strict_variant_fields_and_round_trips ... ok test reducer::tests::split_divides_only_its_own_band ... ok test reducer::tests::view_metadata_targets_and_column_neighbours_are_semantic ... ok test socket::tests::descriptor_declares_server_only_actions_and_strict_subscription ... ok test socket::tests::ordinary_session_binding_borrows_and_escaped_binding_decodes_identically ... ok test socket::tests::result_json_preserves_both_wire_shapes ... ok test socket::tests::session_binding_accepts_json_string_escapes ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_host_facts-8ccf6df635e66a77) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_mesh-27583060726d1618) running 76 tests test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::legacy_host_daemon_and_ip_record_do_not_leave_a_uuid_mesh_name ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_coordination::tests::two_hosts_reporting_the_same_hostname_receive_distinct_names ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test result: ok. 62 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 8.44s Running tests/access_updates.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/access_updates-401a785178272a85) running 8 tests test compact_identity_support_requires_an_explicit_strict_probe ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/authorized_local_binding-9eb78243673aa0ef) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canonical_host_binding-77332b5113aa5170) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/configuration.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/configuration-edd5af664e4aa790) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s Running tests/kernel.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/kernel-ae923fd8446e7953) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/naming-7ef77dd298644e0e) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s Running tests/policy_enrollment_binding.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_enrollment_binding-109d95c10f4ea94b) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/policy_enrollment_identity.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_enrollment_identity-f0cf7a0229e540f5) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/policy_snapshot_ordering.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/policy_snapshot_ordering-7cc2ac94da47cd98) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/presence-3e1bc5e55745d7e3) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/restart_route_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/restart_route_ownership-0dc4cc52f478fbf8) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_authorized_reenrollment-7a5ac950aac5a6a3) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_endpoint_transaction-0ef0c911cceaab22) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_firewall_marker-c4dbb35430ae2de6) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_ingress_translation-c0a4032b0502fe02) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_local_delivery-1712a7f25b19bf51) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_presence_r4-b35fd343e12c696d) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/review_mesh_view_truth.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth-62e9d7f28a99b9eb) running 6 tests test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test an_address_that_is_an_ip_never_becomes_a_name ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s Running tests/review_mesh_view_truth_r2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r2-f6106bc26caa5acf) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test evidence_migrations_0026_and_0029_upgrade_a_realistic_database_without_churn ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.33s Running tests/review_mesh_view_truth_r3.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r3-acc7217987659c70) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/review_mesh_view_truth_r4.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_view_truth_r4-c8f1176c83a6a2a1) running 7 tests test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s Running tests/review_restart_routes.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_restart_routes-012bc6e19af8712e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_retire_ownership-7e7abe5e49e18a66) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 3/11.

test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_reverse_recreation-ba8322a4b4589131)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_route_inventory-db2612871fb84dbf)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_route_scope-7a63cc3e13aa42db)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_shutdown_budget-e6060242e37c449a)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/settings-b0c907b6b74ba896)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/store.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/store-0f17df0f12b6f327)

running 6 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_release-1d54d564a3117987)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_pool-51aabd0e805c8271)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s

     Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_restart-c5f9f9cb62051e16)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1)

running 114 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2
ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... 
running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... 
running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s

ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.84s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86)

running 49 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok
test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/already_added_breakit-e90e2f4c29cb707e)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/auth_order-9968d66820e505cb)

running 11 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/build_removal-9eec37b95ad57c8e)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s

     Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/concurrency-f30db03603f4997a)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/config_isolation-9a944d95ba4eed2e)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/credentials.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/credentials-6e4e4044489fb506)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s

     Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/diagnostics-f0e6f7e48b04f404)

running 12 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/event_metadata-8524db180f9a16df)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/foreground-10281428fe728d1d)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/host_trust-50a4a769c45122d1)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/install-42c84fd1d4c4d48f)

running 95 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test restart_recovers_partial_stage_retirement ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test session_restaging_uses_one_compound_command ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 40.13s

     Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_ssh-2fa83dcf733d059a)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/model-8dc28d474cf55d69)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/payload_source-8da7588b1b1e7c2a)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.11s

     Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/probe_check-376aad85da0f0af1)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/process.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/process-c3eab8acd9e98988)

running 10 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.32s

     Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/proxy_policy-ae5cb2b308a06ccf)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/publication.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/publication-0d82e771a08c3f68)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/real_ssh-bf1648c924584992)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/recovery_support-683687d40ea38ce9)

running 12 tests
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test cleanup_script_requires_the_shipped_helper_level ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.31s

     Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shadow_banner-ec8803577a2b0cd0)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shell_quoting-e07d7690574ed5f8)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/single_connection-628041854be37518)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 3/11. ```text test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_reverse_recreation-ba8322a4b4589131) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_revoked_host_policy-8f0b434cc4a6f49e) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/review_route_inventory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_route_inventory-db2612871fb84dbf) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_route_scope-7a63cc3e13aa42db) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_shutdown_budget-e6060242e37c449a) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_shutdown_restart-90e3bdbafd24755a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/settings-b0c907b6b74ba896) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/store.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/store-0f17df0f12b6f327) running 6 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_relay-d3de297fc8337bde) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_release-1d54d564a3117987) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.63s Running tests/review_pool.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_pool-51aabd0e805c8271) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s Running tests/review_restart.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_restart-c5f9f9cb62051e16) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.08s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_remote-ecf43ccc280cdfc1) running 114 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test runtime_lock::tests::after_close_waits_for_a_slow_socket_snapshot ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2 ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 113 filtered out; finished in 0.00s ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 99 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.84s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_plugin_ssh-17b36253c8d69c86) running 49 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test auth_order::tests::pending_forwards_the_caller_deadline_to_its_selected_session ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_commit_clamps_outliers_and_releases_immediately ... ok test bootstrap::proof_tests::review_stalled_commit_cannot_outlive_attempt_cap ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 47 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/already_added_breakit.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/already_added_breakit-e90e2f4c29cb707e) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/auth_order-9968d66820e505cb) running 11 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/build_removal-9eec37b95ad57c8e) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s Running tests/concurrency.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/concurrency-f30db03603f4997a) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/config_isolation-9a944d95ba4eed2e) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/credentials.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/credentials-6e4e4044489fb506) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s Running tests/diagnostics.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/diagnostics-f0e6f7e48b04f404) running 12 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/event_metadata-8524db180f9a16df) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/foreground-10281428fe728d1d) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/host_trust-50a4a769c45122d1) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/install-42c84fd1d4c4d48f) running 95 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test crash_mid_install_can_roll_back_and_retry ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test restart_recovers_partial_stage_retirement ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ignored, scripts/test-ssh-inode-reuse reports unsupported filesystems as ignored test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test session_restaging_uses_one_compound_command ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 93 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 40.13s Running tests/mesh_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_ssh-2fa83dcf733d059a) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/model-8dc28d474cf55d69) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/payload_source-8da7588b1b1e7c2a) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/previous_attempt_liveness_review-ce46fa87480131ee) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/previous_attempt_shell.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/previous_attempt_shell-b9d97aec39edc4d4) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.11s Running tests/probe_check.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/probe_check-376aad85da0f0af1) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/process.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/process-c3eab8acd9e98988) running 10 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.32s Running tests/proxy_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/proxy_policy-ae5cb2b308a06ccf) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/publication.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/publication-0d82e771a08c3f68) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/real_ssh-bf1648c924584992) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/recovery_support-683687d40ea38ce9) running 12 tests test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test cleanup_script_requires_the_shipped_helper_level ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.31s Running tests/shadow_banner.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shadow_banner-ec8803577a2b0cd0) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shell_quoting.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/shell_quoting-e07d7690574ed5f8) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/single_connection-628041854be37518) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 4/11.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/source_completeness-4d7c035c7195b1ce)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/trust_round2-e8646687aedada12)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_server-f1c601004c6d4da6)

running 727 tests
test auth::account_events::review_revocation_r2::review_r2_aborted_commit_task_preserves_publication_order ... ok
test auth::account_events::review_revocation_r2::review_r2_cancelled_refused_commit_never_publishes ... ok
test auth::account_events::review_revocation_r2::review_r2_panicking_commit_waiter_preserves_publication_order ... ok
test auth::account_events::review_revocation_r2::review_r2_timed_out_commit_waiter_preserves_publication_order ... ok
test auth::account_events::tests::a_closed_cursor_cannot_remove_its_replacement_channel ... ok
test auth::account_events::tests::a_dropped_source_reports_unavailable_instead_of_consuming_a_change ... ok
test auth::account_events::tests::cancellation_preserves_an_unread_generation ... ok
test auth::account_events::tests::cancelled_commit_waiter_still_commits_and_wakes_both_account_sources ... ok
test auth::account_events::tests::coalesced_changes_remain_pending_for_each_affected_account ... ok
test auth::account_events::tests::concurrent_final_drops_remove_the_account_before_receiver_fields_drop ... ok
test auth::account_events::tests::concurrent_registration_and_cleanup_keep_the_existing_generation ... ok
test auth::account_events::tests::last_subscriber_removes_only_its_account ... ok
test auth::account_events::tests::many_accounts_do_not_share_generations_or_retain_inactive_entries ... ok
test auth::account_events::tests::publication_wakes_outside_the_registry_lock ... ok
test auth::account_events::tests::refused_transaction_commit_wakes_neither_account_source ... ok
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok
test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok
test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok
test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::account_logout_does_not_notify_another_account ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::logout_commit::logout_commit_failure_does_not_publish_revocation_or_report_success ... ok
test auth::tests::logout_commit::logout_publication_measurement ... ignored, measurement only; run on a perf VM under perf-run.sh
test auth::tests::logout_commit::review_account_scope_committed_logout_keeps_wake_when_waiter_is_cancelled ... ok
test auth::tests::logout_commit::review_account_scope_statement_rollback_is_quiet_and_later_commit_wakes_once ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok
test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok
test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::per_account_revocation::account_logout_wakes_only_its_16_sockets_among_256 ... ok
test auth::tests::socket_tests::per_account_revocation::account_recovery_wakes_only_its_16_sockets_among_256 ... ok
test auth::tests::socket_tests::per_account_revocation::another_live_session_on_the_affected_account_keeps_its_proof_lease ... ok
test auth::tests::socket_tests::per_account_revocation::coalesced_session_logout_cannot_hide_an_earlier_revoked_proof_lease ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_account_scope::account_deletion_retires_open_sockets_without_affecting_other_accounts ... ok
test auth::tests::socket_tests::review_account_scope::lagged_cursors_survive_65536_overwrites_and_unknown_scope_wakes_every_account ... ok
test auth::tests::socket_tests::review_account_scope::lost_recovery_source_closes_with_1013_without_another_authority_read ... ok
test auth::tests::socket_tests::review_account_scope::lost_revocation_source_closes_with_1013_without_another_authority_read ... ok
test auth::tests::socket_tests::review_account_scope::reassigned_session_cannot_authorize_work_for_its_former_account ... ok
test auth::tests::socket_tests::review_account_scope::review_r2_lost_recovery_source_reports_unavailable_or_reads_authority ... ok
test auth::tests::socket_tests::review_account_scope::simultaneous_recovery_a_and_logout_b_preserve_both_scopes ... ok
test auth::tests::socket_tests::review_account_scope::two_accounts_revoked_before_either_cursor_runs_both_refuse ... ok
test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok
test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok
test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok
test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::bootstrap_logout_before_subscription_closes_idle_upgrade ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::review_account_scope_logout_after_subscription_retires_idle_bootstrap ... ok
test bootstrap_api::tests::review_account_scope_lost_bootstrap_source_retires_instead_of_spinning ... ok
test bootstrap_api::tests::review_r2_restored_bootstrap_source_still_reports_unavailable ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::setup_logout_before_subscription_closes_idle_upgrade ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test bootstrap_api::tests::setup_status_tests::review_account_scope_lost_setup_source_reports_unavailable_and_retires ... ok
test bootstrap_api::tests::setup_status_tests::review_r2_restored_setup_source_still_reports_unavailable ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok
test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok
test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok
test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 4/11. ```text test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/source_completeness-4d7c035c7195b1ce) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/trust_round2-e8646687aedada12) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_server-f1c601004c6d4da6) running 727 tests test auth::account_events::review_revocation_r2::review_r2_aborted_commit_task_preserves_publication_order ... ok test auth::account_events::review_revocation_r2::review_r2_cancelled_refused_commit_never_publishes ... ok test auth::account_events::review_revocation_r2::review_r2_panicking_commit_waiter_preserves_publication_order ... ok test auth::account_events::review_revocation_r2::review_r2_timed_out_commit_waiter_preserves_publication_order ... ok test auth::account_events::tests::a_closed_cursor_cannot_remove_its_replacement_channel ... ok test auth::account_events::tests::a_dropped_source_reports_unavailable_instead_of_consuming_a_change ... ok test auth::account_events::tests::cancellation_preserves_an_unread_generation ... ok test auth::account_events::tests::cancelled_commit_waiter_still_commits_and_wakes_both_account_sources ... ok test auth::account_events::tests::coalesced_changes_remain_pending_for_each_affected_account ... ok test auth::account_events::tests::concurrent_final_drops_remove_the_account_before_receiver_fields_drop ... ok test auth::account_events::tests::concurrent_registration_and_cleanup_keep_the_existing_generation ... ok test auth::account_events::tests::last_subscriber_removes_only_its_account ... ok test auth::account_events::tests::many_accounts_do_not_share_generations_or_retain_inactive_entries ... ok test auth::account_events::tests::publication_wakes_outside_the_registry_lock ... ok test auth::account_events::tests::refused_transaction_commit_wakes_neither_account_source ... ok test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_data_tests::dev_v29_and_production_v30_upgrade_without_retagging_or_losing_ownership ... ok test auth::migration_data_tests::fresh_schemas_defaults_indexes_and_foreign_keys_match_original_sql ... ok test auth::migration_data_tests::original_migration_metadata_and_checksums_are_unchanged ... ok test auth::migration_data_tests::quoted_text_and_comment_looking_literals_keep_their_values ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::account_logout_does_not_notify_another_account ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_accepts_legacy_and_job_scoped_roots ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_root_rejects_unscoped_and_escaping_paths ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::logout_commit::logout_commit_failure_does_not_publish_revocation_or_report_success ... ok test auth::tests::logout_commit::logout_publication_measurement ... ignored, measurement only; run on a perf VM under perf-run.sh test auth::tests::logout_commit::review_account_scope_committed_logout_keeps_wake_when_waiter_is_cancelled ... ok test auth::tests::logout_commit::review_account_scope_statement_rollback_is_quiet_and_later_commit_wakes_once ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::public_status_result_fields_are_listed_in_the_auth_contract ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::canvas::canvas_real_socket_commits_and_runtime_disable_preserve_control ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::revocation_wake_on_busy_store_logs_authority_unavailable_not_resume_refused ... ok test auth::tests::socket_tests::close_logging::revoked_busy_wake_records_stream_end_within_the_existing_wait ... ok test auth::tests::socket_tests::close_logging::revoked_session_during_transient_stall_logs_resume_refused ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::unrelated_logout_during_transient_stall_keeps_the_terminal_socket ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::per_account_revocation::account_logout_wakes_only_its_16_sockets_among_256 ... ok test auth::tests::socket_tests::per_account_revocation::account_recovery_wakes_only_its_16_sockets_among_256 ... ok test auth::tests::socket_tests::per_account_revocation::another_live_session_on_the_affected_account_keeps_its_proof_lease ... ok test auth::tests::socket_tests::per_account_revocation::coalesced_session_logout_cannot_hide_an_earlier_revoked_proof_lease ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_account_scope::account_deletion_retires_open_sockets_without_affecting_other_accounts ... ok test auth::tests::socket_tests::review_account_scope::lagged_cursors_survive_65536_overwrites_and_unknown_scope_wakes_every_account ... ok test auth::tests::socket_tests::review_account_scope::lost_recovery_source_closes_with_1013_without_another_authority_read ... ok test auth::tests::socket_tests::review_account_scope::lost_revocation_source_closes_with_1013_without_another_authority_read ... ok test auth::tests::socket_tests::review_account_scope::reassigned_session_cannot_authorize_work_for_its_former_account ... ok test auth::tests::socket_tests::review_account_scope::review_r2_lost_recovery_source_reports_unavailable_or_reads_authority ... ok test auth::tests::socket_tests::review_account_scope::simultaneous_recovery_a_and_logout_b_preserve_both_scopes ... ok test auth::tests::socket_tests::review_account_scope::two_accounts_revoked_before_either_cursor_runs_both_refuse ... ok test auth::tests::socket_tests::review_authority_cap::every_socket_in_a_full_place_storm_fails_closed_without_a_reply ... ok test auth::tests::socket_tests::review_authority_cap::retries_whose_select_waits_stay_within_the_authority_cap ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_busy_wake::idle_busy_revocation_wake_sends_server_busy_close_code ... ok test auth::tests::socket_tests::review_busy_wake::sixteen_woken_sockets_recover_application_authority_after_a_short_stall ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_absolute_session_expiry ... ok test auth::tests::socket_tests::review_mobile_visibility::review_hidden_socket_cannot_park_logout_revocation ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::session_gone::transient_host_close_absorbs_inflight_credit_resize_and_input ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::bootstrap_logout_before_subscription_closes_idle_upgrade ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::review_account_scope_logout_after_subscription_retires_idle_bootstrap ... ok test bootstrap_api::tests::review_account_scope_lost_bootstrap_source_retires_instead_of_spinning ... ok test bootstrap_api::tests::review_r2_restored_bootstrap_source_still_reports_unavailable ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::setup_logout_before_subscription_closes_idle_upgrade ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test bootstrap_api::tests::setup_status_tests::review_account_scope_lost_setup_source_reports_unavailable_and_retires ... ok test bootstrap_api::tests::setup_status_tests::review_r2_restored_setup_source_still_reports_unavailable ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::admission_tests::missing_route_uses_link_scaled_bound_without_inventory_extensions ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_after_both_route_phases ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_allows_final_proof_at_600_ms ... ok test bootstrap_runtime::remote_backend::admission_tests::review_commit_budget_is_monotonic_for_zero_and_outlier_samples ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_lock_timing_runs_inside_the_nested_setup_shell ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::retry_setup_timing_preserves_transfer_upload_status ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test canvas_store::tests::cancelled_commit_still_invalidates_a_durable_change ... ok test canvas_store::tests::cas_retry_and_foreign_account_isolation ... ok test canvas_store::tests::permanent_receipts_keep_the_original_json_digest_recipe ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::path_tests::review_reply_bypasses_queued_typing_without_losing_its_cursor_or_bytes ... ok ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 5/11.

test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notices_preserve_optional_geometry_through_server ... ok
test embedded::regressions::replay_geometry_rejects_values_outside_u16 ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok
test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok
test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok
test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok
test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok
test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok
test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok
test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok
test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok
test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok
test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok
test websocket::probe_authority::review_r2_restore::review_r2_revoked_lease_with_restored_source_never_polls_work ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok
test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok
test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok
test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok
test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok
test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok

test result: ok. 674 passed; 0 failed; 53 ignored; 0 measured; 0 filtered out; finished in 382.77s

     Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_convergence-1a7528827de3cb23)

running 20 tests
test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok
test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok
test competing_bootstraps_merge_targets_and_retry_after_restart ... ok
test encoded_document_budget_is_enforced_by_the_host_transaction ... ok
test identical_and_empty_second_devices_do_not_advance_revision ... ok
test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok
test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok
test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok
test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok
test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok
test merge_bounds_refuse_without_losing_the_existing_layout ... ok
test no_op_import_receipts_still_have_a_bounded_quota ... ok
test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok
test owned_session_reference_and_all_bounds_are_transactional ... ok
test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok
test session_import_identity_ignores_labels_but_checks_account_ownership ... ok
test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok
test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok
test stale_noop_still_checks_numeric_bounds_before_committing ... ok
test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.76s

     Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab)

running 1 test
test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f)

running 1 test
test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_recovery_review-f2d4bef103e06289)

running 5 tests
test independent_loads_and_base_edit_repair_exactly_once ... ok
test queued_close_of_unique_recovered_window_survives_repair ... ok
test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok
test recovery_at_column_capacity_keeps_the_account_readable ... ok
test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_replay_noop-f45368f3ae253f70)

running 1 test
test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6)

running 2 tests
test retarget_checks_account_ownership_even_after_close ... ok
test retired_reference_does_not_block_an_unrelated_edit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_socket-51aa35d48dc96a00)

running 1 test
test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538)

running 2 tests
test imported_name_respects_the_browser_utf16_bound ... ok
test text_uses_the_browser_utf16_bound ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/catalog_startup-c4f0c5c2b9e63826)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/enrollment-3533ffe0cf2749cb)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s

     Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_parser-f3d43b86d3386706)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_plugin-1de5b08687140771)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_policy-5801ffe603d49dec)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791)

running 25 tests
test healthy_real_socket_survives_a_150ms_server_stall ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/plugin_host_review-1f79717833c5fdb0)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 5/11. ```text test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notices_preserve_optional_geometry_through_server ... ok test embedded::regressions::replay_geometry_rejects_values_outside_u16 ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::reply_order_tests::browser_reply_follows_typing_across_both_forwarding_tasks ... ok test embedded::reply_order_tests::full_reply_reservations_preserve_keyboard_bytes_and_all_eight_slots ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::canvas_layout_migration_upgrades_production_v27_and_fresh_schema_in_order ... ok test enrollment::migration_tests::hostname_migration_allocates_around_retained_names ... ok test enrollment::migration_tests::hostname_migration_upgrades_release6_copy_without_changing_canvas_or_checksums ... ok test enrollment::migration_tests::old_uuid_mesh_placeholders_upgrade_to_audited_unnamed_labels ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::name_tests::an_ip_added_host_uses_its_cached_hostname_and_old_facts_do_not_clear_it ... ok test remote_inventory::name_tests::inventory_hostname_changes_publish_once_and_preserve_hand_names ... ok test remote_inventory::name_tests::late_hostname_inventory_renames_the_attached_mesh_node_and_notifies_viewers ... ok test remote_inventory::name_tests::reported_names_yield_to_records_and_collision_suffixes_and_server_identity_hold ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::review_tests::a_lagging_viewer_cannot_renew_a_deadline_after_the_first_viewer_answered ... ok test terminal_queries::review_tests::all_session_tables_remain_bounded_at_the_registry_limit ... ok test terminal_queries::review_tests::trimmed_output_refuses_its_answer_without_reopening_an_accepted_position ... ok test terminal_queries::review_tests::two_positions_in_one_chunk_are_claimed_in_order_without_reopening_either ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test websocket::probe_authority::review_closed_watch::closed_revocation_watch_is_unavailable_and_never_polls_the_write ... ok test websocket::probe_authority::review_r2_restore::review_r2_revoked_lease_with_restored_source_never_polls_work ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::writer_tests::authority_watchdog::authority_deadline_preserves_subsecond_session_expiry ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::cancelled_storm_returns_every_place_without_duplication ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::deadline_storm_retains_exactly_four_places_then_recovers ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::pool_acquire_timeout_recovers_places_without_releasing_the_connection ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::ready_result_observed_after_deadline_retries_current_authority ... ok test websocket::writer_tests::authority_watchdog::cap_review_r3::sqlite_busy_timeout_recovers_detached_storm_without_unlocking ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::busy_edges::expiry_crossing_a_stalled_read_refuses_both_deadline_callers ... ok test websocket::writer_tests::busy_edges::revoked_probe_across_attempt_backoff_and_total_wait_edges ... ok test websocket::writer_tests::busy_edges::wall_expiry_and_monotonic_deadlines_keep_their_separate_roles ... ok test websocket::writer_tests::resume_refusals_distinguish_connection_state_and_lost_token_rotation ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test websocket_transport::tests::visibility_notices_are_small_typed_transport_messages ... ok test result: ok. 674 passed; 0 failed; 53 ignored; 0 measured; 0 filtered out; finished in 382.77s Running tests/canvas_convergence.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_convergence-1a7528827de3cb23) running 20 tests test a_tiled_import_cannot_duplicate_an_existing_graph_kind ... ok test close_beats_move_resize_in_both_orders_and_survives_compaction ... ok test competing_bootstraps_merge_targets_and_retry_after_restart ... ok test encoded_document_budget_is_enforced_by_the_host_transaction ... ok test identical_and_empty_second_devices_do_not_advance_revision ... ok test import_prefers_matching_names_before_the_first_view_of_its_kind ... ok test importing_an_orphaned_recovery_view_does_not_create_another_recovery_name ... ok test imports_use_account_wide_target_identity_and_keep_spanning_column_geometry ... ok test initialize_and_apply_repair_before_writing_and_notify_subscribers ... ok test loading_repairs_only_matching_recovery_views_and_converges_clients ... ok test merge_bounds_refuse_without_losing_the_existing_layout ... ok test no_op_import_receipts_still_have_a_bounded_quota ... ok test no_op_imports_keep_retry_receipts_and_do_not_clear_operation_history ... ok test owned_session_reference_and_all_bounds_are_transactional ... ok test permanent_receipts_do_not_copy_large_bootstrap_documents ... ok test session_import_identity_ignores_labels_but_checks_account_ownership ... ok test simultaneous_first_devices_merge_disjoint_targets_into_one_view ... ok test split_retry_is_durable_and_changed_idempotency_input_is_refused ... ok test stale_noop_still_checks_numeric_bounds_before_committing ... ok test two_devices_serialize_stale_edits_and_replay_every_committed_revision ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.76s Running tests/canvas_receipt_count.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_receipt_count-dcb7b77ff3a854ab) running 1 test test historical_receipts_backfill_and_follow_transactions_and_account_removal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_receipt_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_receipt_review-f4b0654f8bb85a4f) running 1 test test historical_no_revision_receipts_preserve_replay_and_the_last_real_edit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/canvas_recovery_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_recovery_review-f2d4bef103e06289) running 5 tests test independent_loads_and_base_edit_repair_exactly_once ... ok test queued_close_of_unique_recovered_window_survives_repair ... ok test queued_resize_keeps_its_membership_after_a_separate_read_repair ... ok test recovery_at_column_capacity_keeps_the_account_readable ... ok test repair_rebases_a_cursor_that_already_names_its_next_revision ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/canvas_replay_noop.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_replay_noop-f45368f3ae253f70) running 1 test test committed_noop_is_explicit_without_sending_all_closed_ids_to_clients ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_retired_reference.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_retired_reference-4ae1b19d3a90f2d6) running 2 tests test retarget_checks_account_ownership_even_after_close ... ok test retired_reference_does_not_block_an_unrelated_edit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/canvas_socket.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_socket-51aa35d48dc96a00) running 1 test test snapshot_then_ordered_commit_events_and_revocation_cancel_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/canvas_text_bounds.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/canvas_text_bounds-eb698aef9b5b9538) running 2 tests test imported_name_respects_the_browser_utf16_bound ... ok test text_uses_the_browser_utf16_bound ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/catalog_startup.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/catalog_startup-c4f0c5c2b9e63826) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/enrollment-3533ffe0cf2749cb) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s Running tests/mesh_parser.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_parser-f3d43b86d3386706) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_plugin-1de5b08687140771) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_policy-5801ffe603d49dec) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mesh_review_role_scope-1867947f5f970cf5) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/native_probe_correlation_review-0508c3491f4ab791) running 25 tests test healthy_real_socket_survives_a_150ms_server_stall ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::browser_doubts_one_mobile_delay_and_retires_only_after_two_allowances ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_and_browser_allowance_cover_one_loss_recovery ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_browser_retires_within_two_floors_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::suspended_browser_keeps_its_lease_and_relearns_the_mobile_path ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/plugin_host_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/plugin_host_review-1f79717833c5fdb0) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 6/11.

test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s

     Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/plugin_settings_review-8e826064dc44171b)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/remote_plugin_contract-c936186fbcfd8885)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s

     Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_session-f2f326f18dc6b30e)

running 2 tests
test tests::fresh_exec_closes_dumpability_before_private_startup ... 
running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

ok
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_shim-7c35453813e3afe4)

running 105 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 48.35s

     Running tests/detach.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/detach-6a47ad01fd5a59d3)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s

     Running tests/mouse.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mouse-d13052bb88989529)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

     Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ppu_reliability-2964f940e0c6068a)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ppu_reliability_memory-a754448942207ef2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_status-7910dde34bdac077)

running 14 tests
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok
test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok
test tests::nothing_installed_says_so ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_canvas

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 2 tests
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok
test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 810s)

==> SSH inode reuse fixture
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s
     Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/install-f0d19bd45bc9bae9)

running 1 test
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... SSH test state root exceeds 27 bytes; using /home/agent/.cache/21795
ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.25s
(SSH inode reuse fixture: 0s)

==> shim process-per-user
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.08s
     Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_shim-58e9712d9c0dc37c)

running 218 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok
test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... 
running 1 test
test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.10s

ok
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... 
running 1 test
test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.02s

ok
test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok
test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok
test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok
test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok
test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok
test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok
test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok
test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok
test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok
test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok
test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok
test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok
test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok
test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok
test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay
test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok
test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok
test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok
test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok
test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok
test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok
test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok
test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok
test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok
test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok
test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok
test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok
test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok
test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok
test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok
test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok
test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... 
running 1 test
test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok
test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok
test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok
test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok
test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok
test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok
test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok
test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok
test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok
test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok
test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok
test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok
test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok
test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM
test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok
test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok
test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok
test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale
test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... 
running 1 test
test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s

ok
test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok
test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok
test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok
test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok
test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok
test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok
test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok
test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok
test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok
test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok
test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok
test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok
test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok
test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok
test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok
test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok
test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok
test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok
test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok
test terminal::host_budget::report_native_memory_numbers ... ok
test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok
test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok
test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS
test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions
test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok
test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok
test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok
test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok
test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok
test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok
test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok
test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok
test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok
test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok
test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok
test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok
test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok
test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok
test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok
test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok
test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok
test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok
test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok
test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok
test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok
test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok
test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok
test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok
test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok
test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok
test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok
test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok
test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok

test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 145.68s

(shim process-per-user: 146s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 6/11. ```text test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s Running tests/plugin_settings_review.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/plugin_settings_review-8e826064dc44171b) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/remote_plugin_contract.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/remote_plugin_contract-c936186fbcfd8885) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s Running tests/review_mesh_host_removal.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/review_mesh_host_removal-56ed2d75e836d36e) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/main.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_session-f2f326f18dc6b30e) running 2 tests test tests::fresh_exec_closes_dumpability_before_private_startup ... running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s ok test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_shim-7c35453813e3afe4) running 105 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 104 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 92 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 48.35s Running tests/detach.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/detach-6a47ad01fd5a59d3) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s Running tests/mouse.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/mouse-d13052bb88989529) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Running tests/ppu_reliability.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ppu_reliability-2964f940e0c6068a) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/ppu_reliability_memory.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/ppu_reliability_memory-a754448942207ef2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/process_exit_descriptor.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/process_exit_descriptor-c4b349d2a498ffa6) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_status-7910dde34bdac077) running 14 tests test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::installed_server_discovery_recognizes_the_running_executable_identity ... ok test tests::installed_system_server_data_comes_from_its_effective_execstart ... ok test tests::nothing_installed_says_so ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_canvas running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 2 tests test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 56) - compile fail ... ok test crates/infraternal-shim/src/readiness.rs - readiness::Registration (line 63) - compile fail ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 810s) ==> SSH inode reuse fixture Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s Running tests/install.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/install-f0d19bd45bc9bae9) running 1 test test review_inode_reuse_after_diagnostics_preserves_live_replacement ... SSH test state root exceeds 27 bytes; using /home/agent/.cache/21795 ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 94 filtered out; finished in 0.25s (SSH inode reuse fixture: 0s) ==> shim process-per-user Finished `test` profile [unoptimized + debuginfo] target(s) in 0.08s Running unittests src/lib.rs (/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/debug/deps/infraternal_shim-58e9712d9c0dc37c) running 218 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::borrowed_output_keeps_frozen_bytes_and_refuses_before_batch_mutation ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::batch_append_preserves_prefix_and_refuses_invalid_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test heap_accounting::accounting_keeps_exact_layouts_and_balances_reallocation ... ok test heap_accounting::transient_allocations_are_visible_after_their_storage_is_freed ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_environment_tests::spawned_login_shell_receives_selected_environment_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test pty::handoff::tests::all_masters_survive_original_owner_drop_with_cloexec ... ok test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... running 1 test test pty::handoff::tests::credential_ancillary_refusal_closes_a_kernel_maximum_descriptor_batch ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.10s ok test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... running 1 test test pty::handoff::tests::oversized_ancillary_batch_refusal_closes_every_received_descriptor ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.02s ok test pty::output_readiness_tests::readable_byte_hint_preserves_the_complete_output_stream ... ok test ring::checks::tests::borrowed_ranges_obey_absolute_offsets_across_physical_wrap ... ok test ring::checks::tests::empty_append_keeps_lazy_storage_unallocated ... ok test ring::checks::tests::merge_review_head_and_retained_bytes_match_after_every_append ... ok test ring::checks::tests::merge_review_head_overflow_does_not_publish_or_discard_bytes ... ok test ring::checks::tests::merge_review_pool_refusal_retains_exact_suffix_and_releases_charge ... ok test ring::checks::tests::shared_history_reservation_never_rounds_past_its_share ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::host_budget_tests::alternating_writers_cannot_expand_shared_host_bookkeeping_without_bound ... ok test session::inputs::merge_review::interleaved_replies_and_replays_match_partial_write_model ... ok test session::inputs::merge_review::refused_first_replies_do_not_promote_or_reset_legacy_state ... ok test session::inputs::merge_review::repeated_reply_registration_adds_exactly_one_identity ... ok test session::inputs::merge_review::reply_promotion_preserves_staged_legacy_geometry_and_partial_credit ... ok test session::inputs::reply_tests::host_replies_preserve_segment_budget_and_account_for_promoted_storage ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::reply_tests::reply_identity_is_outside_peer_namespace_and_writer_limit ... ok test session::inputs::tests::host_legacy_writer_needs_no_heap_table ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::bounded_flush_keeps_partial_frame_and_wire_order ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::merge_review_replies_cannot_consume_space_reserved_for_deferred_typing ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::user_host::child_checks::ordinary_housekeeping_does_not_probe_child_status ... ok test session::user_host::child_checks::threaded_startup_is_refused_before_creating_session_state ... ok test session::user_host::lazy_bench::geometry_replay_materialization_cost ... ignored, perf VM only: measure cold materialization after bounded geometry replay test session::user_host::reactor::tests::accounting_write_failure_disables_only_the_receipt ... ok test session::user_host::reactor::tests::actual_output_selector_keeps_a_bulk_turn_after_granted_and_denied_promotions ... ok test session::user_host::reactor::tests::cancelled_bulk_membership_reuses_the_existing_deque_entry ... ok test session::user_host::reactor::tests::cheap_replies_share_a_turn_but_expired_output_yields_to_input ... ok test session::user_host::reactor::tests::exit_observed_before_settle_still_queues_one_retention_deadline ... ok test session::user_host::reactor::tests::fresh_ack_fallback_avoids_writable_poll_and_finishes_with_new_input ... ok test session::user_host::reactor::tests::inline_and_extra_descriptor_flags_merge_without_losing_generations ... ok test session::user_host::reactor::tests::input_phase_retires_closed_identity_without_publishing_transient_interest ... ok test session::user_host::reactor::tests::one_session_readiness_fits_240_requested_bytes ... ok test session::user_host::reactor::tests::ownership_receipt_separates_session_components_and_shared_capacities ... ok test session::user_host::reactor::tests::queued_data_ack_needs_no_writable_poll_before_pty_service ... ok test session::user_host::reactor::tests::readiness_membership_stays_within_five_bytes_per_session ... ok test session::user_host::reactor::tests::readiness_storage_registration_is_at_most_sixteen_bytes ... ok test session::user_host::reactor::tests::readiness_storage_two_descriptors_are_allocation_free ... ok test session::user_host::reactor::tests::ready_rows_clear_only_touched_slots_and_fence_round_wrap ... ok test session::user_host::reactor::tests::ready_rows_keep_two_descriptor_turns_allocation_free_within_64_bytes_per_slot ... ok test session::user_host::reactor::tests::replay_continues_after_its_frame_was_written_inline ... ok test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... running 1 test test session::user_host::reactor::tests::reused_peer_descriptor_receives_a_new_readiness_identity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test session::user_host::reactor::tests::round_reset_and_wrap_preserve_bulk_membership_without_reviving_reads ... ok test session::user_host::reactor::tests::short_output_cohort_yields_before_the_next_input_poll ... ok test session::user_host::reactor::tests::single_ready_descriptor_needs_no_heap_allocation ... ok test session::user_host::reactor::tests::timer_membership_survives_bulk_promotion_cancellation_and_round_wrap ... ok test session::user_host::reactor::tests::unchanged_registration_sync_needs_no_heap_allocation ... ok test session::user_host::tests::admission_refuses_foreign_uid_duplicate_ids_and_geometry_before_spawn ... ok test session::user_host::tests::blocked_state_and_output_share_one_ordered_write_batch ... ok test session::user_host::tests::bulk_turn_advances_sixteen_kib_and_yields_before_the_rest ... ok test session::user_host::tests::data_ack_can_wait_for_a_writable_visit_without_requiring_output ... ok test session::user_host::tests::deferred_data_ack_and_available_output_share_one_ordered_batch ... ok test session::user_host::tests::exhausted_pool_drains_live_ptys_during_random_session_churn ... ok test session::user_host::tests::full_pool_refuses_new_session_and_keeps_existing_session_working ... ok test session::user_host::tests::full_pool_reuses_ring_storage_for_newest_output ... ok test session::user_host::tests::full_pool_typing_echo_latency ... ignored, timing measurement runs on the perf VM test session::user_host::tests::geometry_transcript_materializes_at_its_event_bound ... ok test session::user_host::tests::geometry_transcript_property_cases_match_eager_native_state ... ok test session::user_host::tests::host_pool_scales_with_machine_memory_within_bounds ... ok test session::user_host::tests::idle_session_ownership_ledger ... ignored, perf VM only: per-session requested-byte ownership ledger at scale test session::user_host::tests::large_geometry_cannot_defer_a_long_first_snapshot_reflow_queue ... ok test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... running 1 test test session::user_host::tests::last_viewer_disconnect_releases_unused_peer_slots ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 217 filtered out; finished in 0.00s ok test session::user_host::tests::lazy_prefix_materializes_exactly_before_overflow_and_resize ... ok test session::user_host::tests::malformed_closed_peer_is_retired_once_and_keeps_its_sibling ... ok test session::user_host::tests::medium_geometry_materializes_before_deferred_cell_work_exceeds_the_bound ... ok test session::user_host::tests::output_bound_replays_retained_geometry_before_new_bytes ... ok test session::user_host::tests::pool_usage_never_exceeds_cap_under_open_write_close_sequences ... ok test session::user_host::tests::prefix_threshold_preserves_unfinished_sequences ... ok test session::user_host::tests::quiet_geometry_changes_remain_lazy_and_replay_in_order ... ok test session::user_host::tests::same_geometry_input_selection_keeps_vt_unallocated ... ok test session::user_host::tests::session_constructor_retains_only_the_bound_socket_path ... ok test session::user_host::tests::state_fences_and_input_only_acks_bypass_coalescing ... ok test session::user_host::tests::steady_replay_needs_no_payload_allocation ... ok test session::user_host::tests::unchanged_geometry_retains_native_resize_side_effects ... ok test session::user_host::tests::vt_panic_retires_one_real_pty_and_sibling_keeps_its_output ... ok test session::user_host::tests::writable_peer_receives_state_and_output_before_another_readiness_turn ... ok test session::user_host::tests::zero_ring_capacity_does_not_stall_a_live_pty ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::control_strings_cannot_grow_session_carry_without_bound ... ok test terminal::checks::snapshot_during_discard_preserves_the_unfinished_string_boundary ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::host_budget::erased_history_reset_and_geometry_return_native_memory ... ok test terminal::host_budget::every_history_share_fills_and_recycles_inside_its_reservation ... ok test terminal::host_budget::laptop_screens_come_from_their_floors_not_the_pool ... ok test terminal::host_budget::page_nodes_never_fill_the_ordinary_data_cap ... ok test terminal::host_budget::report_native_memory_numbers ... ok test terminal::host_budget::shared_host_budget_bounds_the_sum_and_keeps_every_terminal_exact ... ok test terminal::host_budget::widening_a_full_history_stays_inside_its_share ... ok test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::ppu_memory_bench::fresh_shell_filler_snapshot_gap_is_independent_of_allocator_refusal ... ok test terminal::ppu_memory_bench::native_session_allocations_settle_after_geometry_warmup ... ignored, perf VM only: native heap/resident accounting; set PPU_VT_ACCOUNT_SESSIONS test terminal::ppu_memory_bench::quiet_resize_churn_does_not_keep_new_resident_pools ... ignored, perf VM only: sparse resize ownership at 900 quiet sessions test terminal::ppu_memory_bench::small_history_does_not_retain_megabyte_page_quanta ... ignored, perf VM only: sparse history residency and native ownership test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::review_r2::review_r2_alternating_oversized_strings_keep_following_output_exact ... ok test terminal::review_r2::review_r2_escape_command_inside_discard_matches_short_string ... ok test terminal::review_r2::review_r2_escape_high_byte_does_not_start_a_hidden_string ... ok test terminal::review_r2::review_r2_ground_c1_introducer_stays_within_the_session_share ... ok test terminal::review_r2::review_r2_host_history_share_fits_the_native_reservation ... ok test terminal::review_r2::review_r2_limiter_is_transparent_for_short_control_mixtures ... ok test terminal::review_r2::review_r2_resize_storm_does_not_ratchet_native_memory ... ok test terminal::review_r2::review_r2_resize_with_full_history_share_stays_exact ... ok test terminal::review_r3::review_r3_bounded_terminal_reflows_long_mixed_history ... ok test terminal::review_r3::review_r3_four_hundred_laptop_screens_fit_the_host ... ok test terminal::review_r3::review_r3_history_share_without_ris_never_refuses ... ok test terminal::review_r3::review_r3_host_accounting_balances_through_recovery ... ok test terminal::review_r3::review_r3_hundred_laptop_sessions_keep_exact_state ... ok test terminal::review_r3::review_r3_noisy_neighbour_does_not_make_quiet_sessions_approximate ... ok test terminal::review_r3::review_r3_recycled_history_matches_unbounded_reference ... ok test terminal::review_r3::review_r3_recycled_unwrapped_history_keeps_exact_snapshot ... ok test terminal::review_r3::review_r3_thousand_sessions_and_one_flood ... ok test terminal::review_r3_default::review_r3_default_terminal_reflows_long_mixed_history ... ok test terminal::user_screen_pool_resize::taller_widening_keeps_history_rows_that_move_onto_the_screen ... ok test terminal_limits::c1_tests::c1_string_inside_csi_has_a_seven_bit_replay_boundary ... ok test terminal_limits::defensive_tests::executed_c0_between_escape_and_introducer_keeps_the_bound ... ok test terminal_limits::tests::escape_after_discard_restarts_without_losing_the_next_command ... ok test terminal_limits::tests::finite_sequences_are_identical_for_every_fragment_boundary ... ok test terminal_limits::tests::fragmented_overflow_stays_discarded_until_a_real_terminator ... ok test terminal_memory::payload_tests::oversized_payload_is_refused_before_allocation_while_tagged_pool_is_allowed ... ok test terminal_memory::payload_tests::residency_query_observes_only_owned_page_mappings_without_faulting_payload ... ok test terminal_memory::tests::allocation_budget_includes_overhead_and_refusal_is_recoverable ... ok test terminal_memory::tests::screen_pages_are_zero_filled_and_page_aligned ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal_native::owned_memory_tests::refusal_inside_reflow_never_touches_freed_pages ... ok test terminal_native::owned_memory_tests::refused_resize_reclaims_every_owned_native_allocation ... ok test result: ok. 199 passed; 0 failed; 19 ignored; 0 measured; 0 filtered out; finished in 145.68s (shim process-per-user: 146s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 7/11.

     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── (build) infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-canvas v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── (build) infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.16
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.16
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-canvas v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-canvas v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-canvas v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:200:1
    │  
200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.16
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-canvas v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:202:1
    │  
202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:205:1
    │  
205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:207:1
    │  
207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── (build) infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 7/11. ```text ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── (build) infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:200:1 │ 200 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 201 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.16 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-canvas v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:202:1 │ 202 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 204 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:205:1 │ 205 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:207:1 │ 207 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 209 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 8/11.

      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.16
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:251:1
    │  
251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── infraternal-plugin-canvas v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-canvas v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── (build) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.16
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.16 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.3
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-canvas v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:254:1
    │  
254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 8/11. ```text │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.16 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:251:1 │ 251 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 252 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── (build) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.16 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.16 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.3 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:254:1 │ 254 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 255 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 9/11.

              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:257:1
    │  
257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-canvas v0.1.0
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:259:1
    │  
259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-canvas v0.1.0
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:317:1
    │  
317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.16
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-canvas v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.3
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-canvas v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-canvas v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── infraternal-shim v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.3 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.3 (*)
      ├── tokio v1.53.3 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
    Finished `release` profile [optimized] target(s) in 0.37s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21434576 bytes; cap: 21434576 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 0.30s
production trust: PASS (staging-trust authority absent)
/home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19610728 bytes; cap: 19610728 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21434576-byte cap PASS; 21434577 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19610728-byte cap PASS; 19610729 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [41.22ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [38.96ms]

 2 pass
 0 fail
 16 expect() calls
Ran 2 tests across 1 file. [96.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 3s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [26.15ms]
(pass) Rust and cached target compiles receive every environment remap [475.57ms]

 2 pass
 0 fail
 121 expect() calls
Ran 2 tests across 1 file. [522.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler
Saved lockfile

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [17.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [26.68ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [16.76ms]
(pass) layout review fixtures ship only in explicitly enabled preview builds [6629.95ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [9.01ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.23ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.15ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.21ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.15ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.20ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.32ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms]

src/stale-screen.test.ts:
(pass) a program that redraws after reattach never shows the note, not for a frame [0.52ms]
(pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms]
(pass) a shell that stays silent shows the note once the wait has run out [0.06ms]
(pass) output that arrives later clears the note [0.06ms]
(pass) an idle shell reattached at the same size is correctly silent and never shows the note [0.04ms]
(pass) a shell that stays silent after the attach resized it shows the note [0.05ms]
(pass) a resized program that repaints never shows the note, not for a frame [0.08ms]
(pass) one changed dimension is a resize [0.03ms]
(pass) output after the note, on a resized reattach, clears it [0.04ms]
(pass) a server that reports no size keeps the wait [0.03ms]
(pass) the replay fence reports a size only when both fields are usable [0.14ms]
(pass) a dropped link takes the note down and cancels a wait that has not ended [0.04ms]
(pass) the wait grows with the round trip and stays bounded [0.09ms]

src/synchronized-output.test.ts:
(pass) synchronized terminal output > recognizes a private mode split across byte and string writes [1.83ms]
(pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.00ms]
(pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.11ms]
(pass) synchronized terminal output > RIS clears an active mode [0.14ms]
(pass) synchronized terminal output > bounds an unfinished control sequence [0.20ms]
(pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.32ms]

src/terminal-fit-lifecycle.test.ts:
(pass) a queued fit stops when the terminal becomes closed [0.51ms]
(pass) a queued fit stops when the terminal becomes suspended [0.04ms]
(pass) a queued fit stops when the terminal becomes frozen [0.02ms]

src/account-storage.test.ts:
(pass) clearing one account leaves a second account and device preferences alone [1.02ms]
(pass) the last-account pointer of another account stays [0.11ms]
(pass) an unknown account clears every account's data and keeps preferences [0.13ms]
(pass) account notifications cannot write before or after disposal [0.27ms]
(pass) legacy generation sweep is account scoped and reports refused erasure [0.24ms]
(pass) R2: 21 legacy generations survive refused cleanup and disappear only after a successful retry [0.58ms]

src/hints.test.ts:
(pass) sign-ins 1 to 5 show a hint once each; the sixth never does [0.49ms]
(pass) a reload inside a sign-in does not show the hint again, and different hints are independent and accounts share anonymous device counters [0.08ms]
(pass) an account without a counter is in its first sign-in [0.11ms]
(pass) storage that throws or holds junk shows nothing and never throws [0.27ms]

test/layout-coalescing-review.test.ts:
(pass) distinct view and column identifiers cannot supersede each other's unsent weights [6.01ms]

test/layout-identity-review.test.ts:
(pass) sign-in and layout-close hints cannot retain the account identifier after sign-out [0.44ms]

real/attachment-bookkeeping.test.ts:
(pass) server-restored streams count without a new client AttachTerm and deduplicate both paths [0.46ms]
(pass) control, malformed and unrelated events cannot invent a real attachment [0.16ms]

real/restart-namespace.test.ts:
(pass) only an explicit private tmpfs runtime qualifies [0.47ms]

src/offline-drawing.test.ts:
(pass) warming the shell never accesses private browser storage [0.59ms]

src/session-notifications.test.ts:
(pass) notifications validate account/lifetime messages and dispose callbacks [0.56ms]
(pass) missing or failed notification channels do not prevent confirmed local teardown [0.28ms]

src/sign-out.test.ts:
(pass) a late successful logout cannot forget or announce revocation for a newer signed-in screen [1.15ms]
(pass) a late failed logout does not thaw the replacement screen [0.30ms]
(pass) new screen logout has its own request and old completion cannot clear its deduplication [0.39ms]
(pass) default lifetime still deduplicates one failed logout and restores its screen [0.23ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.22ms]
(pass) repeating the front item changes nothing [0.04ms]
(pass) the list is capped, so the oldest items fall off [0.04ms]
(pass) top skips items that are no longer live, without losing them [0.06ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.20ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.03ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.06ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.56ms]
(pass) routine connection states stay out of the toast [0.08ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.08ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.22ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.75ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.45ms]
(pass) a deferred new:below selection retains its original window [0.02ms]
(pass) a deferred close selection retains its original window [0.02ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.70ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.26ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.46ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.36ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.14ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.21ms]
(pass) before facts arrive the host's platform names the header [0.06ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.07ms]

src/canvas/windows/session-hooks.test.ts:
(pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.05ms]
(pass) a failed open shows the toast, and opening again after the network returns succeeds [10.90ms]
(pass) an open that joins a failing idle warm-up still shows the toast [5.47ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [2.73ms]

src/canvas/mesh/layout-model.test.ts:
(pass) a pin moved by another device invalidates a same-count pin cache [1.12ms]
(pass) a recovered graph owns its node positions independently [0.17ms]
(pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.16ms]
(pass) with no negative pin the origin is zero and nothing shifts [0.08ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.56ms]
(pass) without `access` (today's server) the person may view and may not edit [0.39ms]
(pass) fields the server does not send are absent, never invented [0.18ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.05ms]
(pass) anything that is not a list is refused, whole [2.30ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.16ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [1.40ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.17ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.31ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.26ms]
(pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.31ms]
(pass) a pushed recovery cancels the scheduled retry [0.32ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.41ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.41ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.13ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.37ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.23ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.23ms]
(pass) initial Mesh list handles closed transport [0.16ms]
(pass) initial Mesh list handles liveness deadline [0.03ms]
(pass) initial Mesh list handles unreadable JSON [0.03ms]
(pass) initial Mesh list handles unavailable storage [0.12ms]
(pass) initial Mesh list handles forbidden action [0.11ms]
(pass) initial Mesh list handles invalid stored host [0.10ms]
(pass) Mesh watch withdrawal handles forbidden [0.19ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.05ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.02ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.36ms]
(pass) the layout is deterministic and does not depend on input order [3.06ms]
(pass) no two cards overlap, and every card lies inside the graph [4.97ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.31ms]
(pass) a pinned node stays where it was put and the others do not move [2.02ms]
(pass) a pin beyond the sheet grows the graph [0.31ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.17ms]
(pass) 1,000 nodes lay out in a few milliseconds [13.52ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.46ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.37ms]
(pass) a view taller than the viewport is scaled down so it fits [0.05ms]
(pass) nearestStop picks the stop whose centre is closest [0.19ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.22ms]
(pass) a small graph keeps one stop per node column [0.11ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.12ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.15ms]
(pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.09ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.98ms]
(pass) closing the new half gives the layout back exactly, in the model [1.40ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.64ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.35ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.82ms]
(pass) closing the window split down gives its band back to the window above and to the partner [1.01ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.19ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.37ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.10ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.17ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [55.89ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.53ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.24ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.15ms]
(pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.89ms]
(pass) a chain of neighbours is pushed in turn [0.11ms]
(pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.41ms]
(pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.57ms]
(pass) snapping rounds to whole cells [0.07ms]
(pass) reach follows grants through tags and keeps the relay [0.27ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.12ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]
(pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.15ms]
(pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.09ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces in-memory session rows without rewriting legacy storage [2.09ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.38ms]
(pass) inventory keeps a remote session per tab and refuses a cross-host attach [0.29ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.11ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.14ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.15ms]
(pass) a final Close before the first positive census never revives a new ID [0.13ms]
(pass) a later absence retires a new ID after its first positive census [0.10ms]
(pass) another host's census cannot clear a new shell's census fence [0.11ms]
(pass) another host's close cannot clear a new shell's census fence [0.02ms]
(pass) shared membership marks windows open without any local attachment [0.39ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.10ms]
(pass) a detected operating system supplies the live popover mark [1.31ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.17ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.29ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.30ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.16ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.14ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.21ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.15ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.12ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [1.36ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.56ms]
(pass) a removal in another browser withdraws the host [0.24ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.35ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.48ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.55ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.24ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.14ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [20.94ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [16.34ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [6.12ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.67ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.47ms]
(pass) oversized refusal JSON is ignored before parsing [0.20ms]

src/canvas/sessions/focus-intent.test.ts:
(pass) focusin supersedes every older focus intent [0.74ms]
(pass) pointerdown supersedes every older focus intent [0.02ms]
(pass) keydown supersedes every older focus intent [0.02ms]
(pass) input supersedes every older focus intent [0.01ms]

src/canvas/model/server-store.test.ts:
(pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [30.16ms]
(pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [2.86ms]
(pass) event before Result and duplicate events do not apply an optimistic edit twice [1.04ms]
(pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.06ms]
(pass) legacy import remains intact until canonical confirmation even if another device initialized [0.64ms]
(pass) dispose cancels late callbacks after sign-out [0.48ms]
(pass) a pending reference preserves unrelated edits across remote paints and is never sent [2.12ms]
(pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.96ms]
(pass) an acknowledgement after its ordered event does not repaint the same layout [0.50ms]
(pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable without rewriting its source [0.48ms]
(pass) ready edits share one network round trip with a bounded in-flight window [1.17ms]
(pass) the optimistic semantic projection paints before any server receipt [0.64ms]
(pass) a no-op drawing capture does not trigger another paint [0.25ms]
(pass) review: a refused structural edit cannot strand later valid edits [0.73ms]
(pass) a definitive refusal paints rollback in memory and never retries after reconnect [0.99ms]
(pass) a stale refusal cannot discard a new-connection retry [0.38ms]
(pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.41ms]
(pass) a normal reconnect snapshot arrives before any replacement is requested [0.39ms]
(pass) legacy import retires only after receipt and canonical coverage, receipt first=false [0.40ms]
(pass) legacy import retires only after receipt and canonical coverage, receipt first=true [0.12ms]
(pass) refused import and refused cleanup preserve their legacy source until confirmed removal succeeds [0.55ms]
(pass) reference completion during failed logout is retained without sending until edits resume [0.69ms]

src/canvas/model/lifetime.test.ts:
(pass) logout freezes the initiating account; failure preserves its queue; success forgets only that lifetime [0.18ms]
(pass) dropping a session clears canonical drawing, placeholders and pending callbacks permanently [0.24ms]

src/canvas/model/review-null.test.ts:
(pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.18ms]

src/canvas/model/per-tab.test.ts:
(pass) Hunt 1 / R1 adoption: online peers cannot overwrite or retire a live offline queue [1.45ms]
(pass) R1 failed replacement / R2 unreadable source / 33+33 legacy columns: sources never retire without import confirmation [0.97ms]
(pass) R2 full-history flush / R3 refused cleanup: 8192 queued intents do zero storage work [520.70ms]
(pass) R2 full-history flush / R3 refused cleanup: 32768 queued intents do zero storage work [1672.67ms]
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 9/11. ```text ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:257:1 │ 257 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 258 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:259:1 │ 259 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 260 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/agent/wt-infraternal/layout-per-tab-250/Cargo.lock:317:1 │ 317 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 318 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.16 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.3 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-canvas v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-canvas v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.3 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.3 (*) ├── tokio v1.53.3 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Finished `release` profile [optimized] target(s) in 0.37s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21434576 bytes; cap: 21434576 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 0.30s production trust: PASS (staging-trust authority absent) /home/agent/.cache/codex-scratch/layout-per-tab-250-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19610728 bytes; cap: 19610728 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21434576-byte cap PASS; 21434577 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19610728-byte cap PASS; 19610729 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [41.22ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [38.96ms] 2 pass 0 fail 16 expect() calls Ran 2 tests across 1 file. [96.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 3s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [26.15ms] (pass) Rust and cached target compiles receive every environment remap [475.57ms] 2 pass 0 fail 121 expect() calls Ran 2 tests across 1 file. [522.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler Saved lockfile ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [17.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [26.68ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [16.76ms] (pass) layout review fixtures ship only in explicitly enabled preview builds [6629.95ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [9.01ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.23ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.15ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.21ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.15ms] (pass) FrameDetector > fps, p95 and window read the ring [0.20ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.32ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.07ms] src/stale-screen.test.ts: (pass) a program that redraws after reattach never shows the note, not for a frame [0.52ms] (pass) a redraw that arrived before the replay painted needs no wait at all [0.04ms] (pass) a shell that stays silent shows the note once the wait has run out [0.06ms] (pass) output that arrives later clears the note [0.06ms] (pass) an idle shell reattached at the same size is correctly silent and never shows the note [0.04ms] (pass) a shell that stays silent after the attach resized it shows the note [0.05ms] (pass) a resized program that repaints never shows the note, not for a frame [0.08ms] (pass) one changed dimension is a resize [0.03ms] (pass) output after the note, on a resized reattach, clears it [0.04ms] (pass) a server that reports no size keeps the wait [0.03ms] (pass) the replay fence reports a size only when both fields are usable [0.14ms] (pass) a dropped link takes the note down and cancels a wait that has not ended [0.04ms] (pass) the wait grows with the round trip and stays bounded [0.09ms] src/synchronized-output.test.ts: (pass) synchronized terminal output > recognizes a private mode split across byte and string writes [1.83ms] (pass) synchronized terminal output > preserves mode transitions for every pair of input chunk boundaries [2.00ms] (pass) synchronized terminal output > ignores CSI-looking bytes inside control strings and other mode numbers [0.11ms] (pass) synchronized terminal output > RIS clears an active mode [0.14ms] (pass) synchronized terminal output > bounds an unfinished control sequence [0.20ms] (pass) synchronized terminal output > paints queued output on the first frame after reset and timeout release [0.32ms] src/terminal-fit-lifecycle.test.ts: (pass) a queued fit stops when the terminal becomes closed [0.51ms] (pass) a queued fit stops when the terminal becomes suspended [0.04ms] (pass) a queued fit stops when the terminal becomes frozen [0.02ms] src/account-storage.test.ts: (pass) clearing one account leaves a second account and device preferences alone [1.02ms] (pass) the last-account pointer of another account stays [0.11ms] (pass) an unknown account clears every account's data and keeps preferences [0.13ms] (pass) account notifications cannot write before or after disposal [0.27ms] (pass) legacy generation sweep is account scoped and reports refused erasure [0.24ms] (pass) R2: 21 legacy generations survive refused cleanup and disappear only after a successful retry [0.58ms] src/hints.test.ts: (pass) sign-ins 1 to 5 show a hint once each; the sixth never does [0.49ms] (pass) a reload inside a sign-in does not show the hint again, and different hints are independent and accounts share anonymous device counters [0.08ms] (pass) an account without a counter is in its first sign-in [0.11ms] (pass) storage that throws or holds junk shows nothing and never throws [0.27ms] test/layout-coalescing-review.test.ts: (pass) distinct view and column identifiers cannot supersede each other's unsent weights [6.01ms] test/layout-identity-review.test.ts: (pass) sign-in and layout-close hints cannot retain the account identifier after sign-out [0.44ms] real/attachment-bookkeeping.test.ts: (pass) server-restored streams count without a new client AttachTerm and deduplicate both paths [0.46ms] (pass) control, malformed and unrelated events cannot invent a real attachment [0.16ms] real/restart-namespace.test.ts: (pass) only an explicit private tmpfs runtime qualifies [0.47ms] src/offline-drawing.test.ts: (pass) warming the shell never accesses private browser storage [0.59ms] src/session-notifications.test.ts: (pass) notifications validate account/lifetime messages and dispose callbacks [0.56ms] (pass) missing or failed notification channels do not prevent confirmed local teardown [0.28ms] src/sign-out.test.ts: (pass) a late successful logout cannot forget or announce revocation for a newer signed-in screen [1.15ms] (pass) a late failed logout does not thaw the replacement screen [0.30ms] (pass) new screen logout has its own request and old completion cannot clear its deduplication [0.39ms] (pass) default lifetime still deduplicates one failed logout and restores its screen [0.23ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.22ms] (pass) repeating the front item changes nothing [0.04ms] (pass) the list is capped, so the oldest items fall off [0.04ms] (pass) top skips items that are no longer live, without losing them [0.06ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.20ms] (pass) recentRows: a view with three windows and no use shows them in order [0.03ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.06ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.56ms] (pass) routine connection states stay out of the toast [0.08ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.08ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.22ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [674.75ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.45ms] (pass) a deferred new:below selection retains its original window [0.02ms] (pass) a deferred close selection retains its original window [0.02ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.70ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.26ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.46ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.36ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.14ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.21ms] (pass) before facts arrive the host's platform names the header [0.06ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.07ms] src/canvas/windows/session-hooks.test.ts: (pass) a failed idle warm-up shows no toast and retries when the browser is back online [11.05ms] (pass) a failed open shows the toast, and opening again after the network returns succeeds [10.90ms] (pass) an open that joins a failing idle warm-up still shows the toast [5.47ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [2.73ms] src/canvas/mesh/layout-model.test.ts: (pass) a pin moved by another device invalidates a same-count pin cache [1.12ms] (pass) a recovered graph owns its node positions independently [0.17ms] (pass) a negative pin is drawn by shifting the whole graph by whole grid cells; no pin is rewritten [0.16ms] (pass) with no negative pin the origin is zero and nothing shifts [0.08ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.56ms] (pass) without `access` (today's server) the person may view and may not edit [0.39ms] (pass) fields the server does not send are absent, never invented [0.18ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.05ms] (pass) anything that is not a list is refused, whole [2.30ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.16ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [1.40ms] (pass) answers carry the new revision, and a create the new arrow's id [0.17ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.11ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.31ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.26ms] (pass) a changed Mesh revision refreshes a renamed host in the existing view model [0.31ms] (pass) a pushed recovery cancels the scheduled retry [0.32ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.41ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.41ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.13ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.37ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.23ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.23ms] (pass) initial Mesh list handles closed transport [0.16ms] (pass) initial Mesh list handles liveness deadline [0.03ms] (pass) initial Mesh list handles unreadable JSON [0.03ms] (pass) initial Mesh list handles unavailable storage [0.12ms] (pass) initial Mesh list handles forbidden action [0.11ms] (pass) initial Mesh list handles invalid stored host [0.10ms] (pass) Mesh watch withdrawal handles forbidden [0.19ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.05ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.02ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.36ms] (pass) the layout is deterministic and does not depend on input order [3.06ms] (pass) no two cards overlap, and every card lies inside the graph [4.97ms] (pass) the sheet is wider than tall, roughly 16:10 [1.31ms] (pass) a pinned node stays where it was put and the others do not move [2.02ms] (pass) a pin beyond the sheet grows the graph [0.31ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.17ms] (pass) 1,000 nodes lay out in a few milliseconds [13.52ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.46ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.37ms] (pass) a view taller than the viewport is scaled down so it fits [0.05ms] (pass) nearestStop picks the stop whose centre is closest [0.19ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.22ms] (pass) a small graph keeps one stop per node column [0.11ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.12ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.15ms] (pass) D309: with a floor, a narrow column gets a stop of its drawn width and each column is reachable [0.09ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.98ms] (pass) closing the new half gives the layout back exactly, in the model [1.40ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.64ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.35ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.82ms] (pass) closing the window split down gives its band back to the window above and to the partner [1.01ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.19ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.37ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.10ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.17ms] (pass) random sequences of split right, split down, new window right and close never break the grid [55.89ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.53ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.24ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.15ms] (pass) a narrow right split grows both drawn tracks to the canonical minimum [0.11ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.89ms] (pass) a chain of neighbours is pushed in turn [0.11ms] (pass) display settlement clears disconnected overlaps while keeping its one anchor fixed [0.41ms] (pass) review: a viewport width increase after settlement keeps the Settings anchor clear [0.57ms] (pass) snapping rounds to whole cells [0.07ms] (pass) reach follows grants through tags and keeps the relay [0.27ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.12ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms] (pass) a desktop column is the same alone and in a strip [0.02ms] (pass) D309: a touch screen draws every column at least MIN_TOUCH_COLUMN wide, never wider than a lone column; a fine pointer has no floor [0.15ms] (pass) D309: the content is as wide as the drawn columns, so the camera reaches every column [0.09ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces in-memory session rows without rewriting legacy storage [2.09ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.38ms] (pass) inventory keeps a remote session per tab and refuses a cross-host attach [0.29ms] (pass) superseded status snapshots release records for sessions this device never opened [1.11ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.14ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.15ms] (pass) a final Close before the first positive census never revives a new ID [0.13ms] (pass) a later absence retires a new ID after its first positive census [0.10ms] (pass) another host's census cannot clear a new shell's census fence [0.11ms] (pass) another host's close cannot clear a new shell's census fence [0.02ms] (pass) shared membership marks windows open without any local attachment [0.39ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.10ms] (pass) a detected operating system supplies the live popover mark [1.31ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.17ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.29ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.30ms] (pass) unknown and ambiguous labels never open an embedded shell [0.16ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.14ms] (pass) an authoritative host snapshot replaces admission with one notification [0.21ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.15ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.12ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [1.36ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.56ms] (pass) a removal in another browser withdraws the host [0.24ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.35ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.48ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.55ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.24ms] (pass) a known retired status survives repeated selection and generic ended answers [0.14ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [20.94ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [16.34ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [6.12ms] (pass) legacy refusals still work and malformed counters never reach the message [0.67ms] (pass) product copy names the host and counters and never renders untrusted server text [0.47ms] (pass) oversized refusal JSON is ignored before parsing [0.20ms] src/canvas/sessions/focus-intent.test.ts: (pass) focusin supersedes every older focus intent [0.74ms] (pass) pointerdown supersedes every older focus intent [0.02ms] (pass) keydown supersedes every older focus intent [0.02ms] (pass) input supersedes every older focus intent [0.01ms] src/canvas/model/server-store.test.ts: (pass) a negative drop on a 1,025-node mesh writes one pin, and the peer ends with every pin (#24) [30.16ms] (pass) repeated pin moves reach both coordinate limits; the next move is refused and rolled back [2.86ms] (pass) event before Result and duplicate events do not apply an optimistic edit twice [1.04ms] (pass) reconnect retries the exact request and an old receipt removes its optimistic overlay [1.06ms] (pass) legacy import remains intact until canonical confirmation even if another device initialized [0.64ms] (pass) dispose cancels late callbacks after sign-out [0.48ms] (pass) a pending reference preserves unrelated edits across remote paints and is never sent [2.12ms] (pass) closing an unsent shell removes its unresolved birth without blocking surviving children [0.96ms] (pass) an acknowledgement after its ordered event does not repaint the same layout [0.50ms] (pass) a bootstrap receipt before its canonical snapshot keeps the legacy layout drawable without rewriting its source [0.48ms] (pass) ready edits share one network round trip with a bounded in-flight window [1.17ms] (pass) the optimistic semantic projection paints before any server receipt [0.64ms] (pass) a no-op drawing capture does not trigger another paint [0.25ms] (pass) review: a refused structural edit cannot strand later valid edits [0.73ms] (pass) a definitive refusal paints rollback in memory and never retries after reconnect [0.99ms] (pass) a stale refusal cannot discard a new-connection retry [0.38ms] (pass) review r2: refusal drains independent edits waiting behind four in-flight requests [1.41ms] (pass) a normal reconnect snapshot arrives before any replacement is requested [0.39ms] (pass) legacy import retires only after receipt and canonical coverage, receipt first=false [0.40ms] (pass) legacy import retires only after receipt and canonical coverage, receipt first=true [0.12ms] (pass) refused import and refused cleanup preserve their legacy source until confirmed removal succeeds [0.55ms] (pass) reference completion during failed logout is retained without sending until edits resume [0.69ms] src/canvas/model/lifetime.test.ts: (pass) logout freezes the initiating account; failure preserves its queue; success forgets only that lifetime [0.18ms] (pass) dropping a session clears canonical drawing, placeholders and pending callbacks permanently [0.24ms] src/canvas/model/review-null.test.ts: (pass) a mixed nullable resize cannot invalidate the canonical drawing document [0.18ms] src/canvas/model/per-tab.test.ts: (pass) Hunt 1 / R1 adoption: online peers cannot overwrite or retire a live offline queue [1.45ms] (pass) R1 failed replacement / R2 unreadable source / 33+33 legacy columns: sources never retire without import confirmation [0.97ms] (pass) R2 full-history flush / R3 refused cleanup: 8192 queued intents do zero storage work [520.70ms] (pass) R2 full-history flush / R3 refused cleanup: 32768 queued intents do zero storage work [1672.67ms] ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 10/11.

(pass) R2 concurrent first tabs / failed marker / R3 missing locks: no lifetime creation or lock fallback exists [1.09ms]
(pass) R2 sign-out between check/write / R3 delayed startup: teardown invalidates old callbacks before later login [0.70ms]
(pass) R2 completed capture before 300 ms: unconfirmed tab loss is explicit; confirmed state restores from server [0.51ms]
(pass) R2 100 snapshots and 50 ms do not establish a receipt identity or expire uncertainty [65.18ms]
(pass) absent, throwing and recovered storage cannot change live edit acceptance [1.75ms]
(pass) refused individual intents leave independent tabs and later edits live [0.66ms]
(pass) R1 stale unresolved duplicate cannot suppress a completed same-tab birth [1.15ms]

src/canvas/model/operations.test.ts:
(pass) independent resize and move commute; close survives a stale move [1.02ms]
(pass) right split of a stack preserves the upper band [0.30ms]
(pass) reorder uses stable neighbours and emits no document [0.96ms]
(pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.50ms]
(pass) a three-window reorder sends one semantic move [0.31ms]
(pass) a split before the first reference is journalled opens its anchor before splitting [0.46ms]
(pass) a drop sends the moved membership once, without derived neighbour geometry [0.42ms]
(pass) a narrow right split widens first so both halves remain valid [0.56ms]
(pass) a short down split grows the anchor first so both halves meet the height floor [0.68ms]

src/canvas/model/queue-budget.test.ts:
(pass) adjacent same-field unsent edits coalesce; sent requests retain identical identity and input [0.85ms]
(pass) byte backpressure reports refusal before changing projection or silently dropping older work [0.48ms]
(pass) rejected placeholder cancellation preserves the accepted birth and unresolved dependency [0.76ms]
(pass) completed reference size counts toward backpressure without mutating a refused completion [0.70ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.61ms]
(pass) a document survives JSON and rebuilds the same columns [0.52ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.20ms]
(pass) parseDocument rejects anything that is not a document of this format [0.27ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.19ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.46ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.40ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.08ms]
(pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.39ms]
(pass) D309: a view this device pushed clear for display is saved where the layout has it [0.16ms]
(pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.10ms]
(pass) a captured graph document is independent of the next pin drag [0.10ms]

src/canvas/model/sync.test.ts:
(pass) a pending session never delays other edits or waits for a network receipt [1.44ms]
(pass) inventory includes shared memberships that this device cannot render [1.13ms]
(pass) temporary flow windows are never treated as unsubmitted shared windows [0.27ms]

src/canvas/model/review-span.test.ts:
(pass) a down split shifts every column in a transitively connected group [0.35ms]

src/canvas/model/reducer-property.test.ts:
layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences
(pass) property: accepted random operation sequences match the real server reducer [3025.33ms]

src/canvas/model/session-incarnation.test.ts:
(pass) reconnect original fences unsent work before the snapshot pump [1.38ms]
(pass) reconnect replacement fences unsent work before the snapshot pump [0.65ms]
(pass) queued work with no original binding cannot adopt a later incarnation [0.72ms]

src/canvas/model/review-boundary-r2.test.ts:
review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted
(pass) review r2: longer boundary-weighted sequences preserve every accepted projection [2088.33ms]

src/canvas/model/reconcile.test.ts:
(pass) review: removing the current shared view selects a surviving camera anchor [6.06ms]
(pass) a remote negative pin and node update preserve the world position of an unchanged card [1.25ms]

src/canvas/model/journal-confirmation.test.ts:
(pass) hunt 2: uncertain sent edit stays hidden over a newer snapshot until its receipt [0.36ms]
(pass) R1 held notification: a receipt above canonical explicitly reveals the overlay [0.16ms]
(pass) R2 receiptless identity survives 100 matching snapshots without silent confirmation [0.48ms]
(pass) R1 covered receipt is pruned before projecting canonical revision 3 [0.18ms]
(pass) duplicate event then late refusal cannot discard independent work [0.17ms]

src/canvas/model/server-store-p3-review.test.ts:
(pass) review: two successive gaps coalesce while each snapshot is outstanding [0.89ms]
(pass) review: a snapshot arriving after newer deltas never rolls back canonical state [0.13ms]
(pass) review: outage edits wait for snapshot then send each identity once in order [0.93ms]
(pass) review: a 3 s RTT fresh route stays quiet until its complete recovery budget [0.38ms]
(pass) review: changed RTT reschedules the notice and successful recovery cancels future notices [0.49ms]
(pass) review: recovery before the budget remains quiet across repeated drops and disposal frees timers [2.68ms]
(pass) review: an edit first made while offline eventually emits the calm notice [0.39ms]
(pass) review: a first-connect outage with no RTT sample cannot hide pending edits forever [0.48ms]
(pass) hunt 4: slow snapshots own one watchdog; bounded retries pause offline and disposal cancels them [0.42ms]

src/canvas/model/journal.test.ts:
(pass) an offline birth keeps its identity through same-tab reference completion [1.34ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.04ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.36ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.65ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.61ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.52ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [49.95ms]
(pass) review reconnect budget survives sockets that open then close without events [46.27ms]
(pass) review explicit retry resumes after the setup feed stops [46.80ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.85ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.19ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.25ms]
(pass) review listed inventory name plus port retains its resolved address [0.30ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.14ms]
(pass) parseSetupEvent > drops anything malformed [0.08ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.05ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.13ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.08ms]
(pass) foldSetup > ready done completes the run [0.05ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.10ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms]
(pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.13ms]
(pass) review malformed setup fields are dropped without coercion errors [0.11ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.19ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.28ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.07ms]
(pass) parsing the server's data > an install command needs a lifetime [0.06ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.29ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.27ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.97ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.16ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.09ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [1.00ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.46ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.27ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.27ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [3.27ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.30ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.23ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.22ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.22ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.36ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.07ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms]
(pass) authLabel > names the method and a trusted network provider only [0.04ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms]
(pass) guideFor > each failure kind names its fix [0.08ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.05ms]
(pass) parseTarget > reads user, host and port [0.09ms]
(pass) parseTarget > reads a pasted ssh command into the same fields [0.93ms]
(pass) parseTarget > reads an ssh:// address [0.14ms]
(pass) parseTarget > refuses garbage around an ssh command [0.09ms]
(pass) parseTarget > refuses what cannot name a host [0.04ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.43ms]
(pass) parseSshConfig > recognises config text [0.05ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.04ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.06ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.15ms]
(pass) only a completed canonical host identity becomes terminal authority [0.13ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.06ms]
(pass) missing payload tells the operator the architecture and expected server path [0.04ms]
(pass) an already added host says so and offers opening its existing terminal [0.27ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.05ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.08ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.07ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.47ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms]
(pass) ready CA begins the requested installation mode without another prompt [0.10ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.33ms]
(pass) a typed root login requires explicit consent before any installation [0.20ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.04ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.02ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.50ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.54ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.20ms]
(pass) a chunk that both sides use stays critical [0.20ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.17ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.20ms]
(pass) automatic canonical painting loads after the first canvas draw [0.16ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [4.49ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [3.22ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [4.01ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [14.24ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [29.52ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.40ms]
(pass) abandoned word acknowledgement uploads nothing [4.52ms]
(pass) settled acknowledgement cannot upload later (dismissed) [4.14ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.65ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [3.02ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [2.37ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [2.39ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [2.79ms]
(pass) malformed or excessive remaining wait -1 is denied [1.90ms]
(pass) malformed or excessive remaining wait 0.5 is denied [2.05ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.76ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [2.04ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.84ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.81ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.43ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms]
(pass) the viewer announces the link-doubt capability in its Hello [2.90ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.20ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.03ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.21ms]
(pass) routine detach and connection rotation reasons stay neutral [0.02ms]
(pass) a stream close that reattaches never says the terminal ended [0.08ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.03ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.09ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.32ms]
(pass) counted closes are reported when their window ends, without another close [0.04ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [1.45ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.10ms]

src/onboarding-load.test.ts:
(pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.47ms]
(pass) the Try again button reloads the page: a failed import stays failed in the module map [5.56ms]
(pass) the online event retries by itself [5.29ms]

 407 pass
 0 fail
 22240 expect() calls
Ran 407 tests across 72 files. [15.63s]
bun test v1.4.2 (744846f84)

src/connection-correlation-review.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [13.71ms]

src/connection-idle.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.13ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 1 [4.23ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.76ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.36ms]
(pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [6.14ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 1 [2.04ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 1 [1.65ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 1 [1.22ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 1 [1.72ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 30 [1.26ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 30 [1.19ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 30 [1.25ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 30 [1.35ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 0 at RTT 150 [0.93ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 7 at RTT 150 [0.79ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 20 at RTT 150 [0.75ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) idle silence deadline survives probe phase 39 at RTT 150 [0.97ms]
(pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.97ms]
(pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [6.32ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.28ms]
(pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.83ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [2.02ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [2.15ms]
(pass) a healthy browser route survives 150ms scheduler delay across 1 streams [1.99ms]
(pass) a healthy browser route survives 150ms scheduler delay across 28 streams [2.49ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.85ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) browser jitter allowance decays after a stable link returns [14.31ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.01ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.69ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.61ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.37ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [1.82ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [1.82ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a late timer without a reply counts subsequent responsive silence [1.78ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) an outstanding probe gets responsive observation after a renderer stall [5.47ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) retirement gives a queued mismatched pong one task turn [2.14ms]
(pass) retirement gives a queued correlated pong one task turn [1.63ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead typing route eventually retires when browser tasks run every 75ms [2.00ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 1000ms [1.89ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.63ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.81ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.96ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.98ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) correlated queued replies replenish stall grace across successive healthy stalls [2.33ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) duplicate replies cannot replenish consumed stall grace [2.25ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) wrong timestamp replies cannot replenish consumed stall grace [1.92ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) unknown nonce replies cannot replenish consumed stall grace [1.51ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.41ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1
(pass) a replacement route receives its own one-shot local stall grace [2.77ms]
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) continuous typing cannot cancel every silent-route confirmation turn [2.76ms]
(pass) a pending confirmation is reset by reconnect [2.68ms]
Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0
(pass) a pending confirmation is reset by close [2.48ms]
(pass) a pending confirmation is reset by dispose [2.01ms]
(pass) a stale confirmation from before reconnect cannot close the replacement route [2.85ms]
(pass) a hidden page resumes its lease after 5000ms without retiring queued replies [3.26ms]
(pass) a hidden page resumes its lease after 30000ms without retiring queued replies [2.43ms]
(pass) a socket lost while hidden waits for visibility before reconnecting [1.87ms]
(pass) mobile jitter and one retransmission keep a foreground browser lease [56.17ms]
(pass) visibility notices require both peers to support them: false [0.65ms]
(pass) visibility notices require both peers to support them: true [0.40ms]
(pass) hiding a page cancels a retry scheduled while it was visible [1.55ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.29ms]
(pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [2.21ms]
(pass) a layout subscription starts the connection before any terminal exists [0.75ms]
(pass) resync replaces one subscription ID and disposal prevents later resyncs [1.39ms]
(pass) resync reopens a feature subscription with the same server ID [0.60ms]

src/connection-layout-removal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [13.70ms]

src/connection-liveness.test.ts:
Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0
(pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.28ms]

src/connection-pool.test.ts:
(pass) terminals fill the first socket, then open another, and a released slot is reused first [0.55ms]
(pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.66ms]

src/connection-probe-scheduling-review.test.ts:
(pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.93ms]
(pass) a fully answered browser route survives a delayed next probe with an attachment [0.68ms]

src/connection-query-capabilities.test.ts:
(pass) query replies negotiate independently with Hello caps 0 [0.13ms]
(pass) query replies negotiate independently with Hello caps 4
(pass) query replies negotiate independently with Hello caps 8
(pass) query replies negotiate independently with Hello caps 12

src/connection-query-refusal.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [13.18ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [4.11ms]

src/connection-restart.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1
(pass) an overnight connection retains its writer and pending input when the server restarts [1.21ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a second quick server close leaves the fast path and backs off [0.86ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) a failed first recovery handshake exits the one quick retry [0.75ms]
Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0
(pass) a server close reason survives socket retirement and the next retry [0.90ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0
(pass) a clean server socket close keeps its fallback reason through the next retry [1.11ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [15.12ms]
Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0
(pass) online and foreground events cancel delays and preserve handshakes in progress [2.42ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [1.05ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.38ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.31ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.25ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.25ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.22ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.32ms]
Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0
(pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms]

src/connection-review-refusal-input.test.ts:
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [3.48ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.75ms]

src/connection-review-retained-lifetime.test.ts:
(pass) review: saved typing can be declined without closing the live shell [1.06ms]
(pass) review: new typing reaches the fresh shell while saved typing stays pending [0.22ms]
(pass) review: retained input and consent are local to their terminal window [0.16ms]
(pass) review: selecting a different session removes saved typing and its action [0.14ms]
(pass) review: another refused writer retains pending and unacknowledged fresh typing [0.16ms]
(pass) review: window disposal clears held input and rejects a stale resend action [0.57ms]

src/connection-startup-review.test.ts:
(pass) a healthy startup route can learn an RTT above the initial estimate [12.69ms]

src/connection-unattached-close.test.ts:
(pass) disposing a window before its welcome microtask sends no unbound Close [1.73ms]
Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0
(pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [1.42ms]

 105 pass
 0 fail
 413 expect() calls
Ran 105 tests across 13 files. [385.00ms]
bun test v1.4.2 (744846f84)

src/terminal-queries.test.ts:
(pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.74ms]
(pass) all requested query families have identities [0.21ms]
(pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.90ms]
(pass) oversized OSC retains BEL termination before a later query [0.17ms]

src/terminal-query-property.test.ts:
[ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
[ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13
QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2
(pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [563.50ms]

src/terminal-query-renderer-review.test.ts:
(pass) review: DECID gives every real renderer response an identity [1.25ms]
(pass) review: zero-padded CPR gives every real renderer response an identity [2.44ms]
(pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.35ms]
(pass) review: three adjacent requests keep distinct identities across different viewer chunking [8.93ms]

src/terminal-write-slices.test.ts:
(pass) every slice split preserves cells, cursor and all renderer answers [41.61ms]
(pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.22ms]
(pass) escaped writers cannot access released input and callback failure releases the scope [0.71ms]
(pass) nested writes and memory growth cannot replace borrowed input [0.41ms]
(pass) allocation refusal never writes or frees unowned memory [2.14ms]
(pass) empty scopes accept no input and reject later writer use [0.37ms]
(pass) input views of native memory survive allocation-driven memory growth [0.38ms]
(pass) throwing callbacks release exactly their owned input allocation [0.41ms]

 17 pass
 0 fail
 1794 expect() calls
Ran 17 tests across 4 files. [668.00ms]
$ bun run build.ts
built chunk-dnht0vhh.js, chunk-jzq6yp23.js, chunk-fgyqkfk9.js, chunk-w5n5wcq2.js, chunk-nmrx4qqv.js, chunk-szns5x6a.js, chunk-y8f5htph.js, chunk-na49xj9e.js, chunk-xycr6ryq.js, chunk-tj8daj0z.js, chunk-gxvqf3b8.js, chunk-warvf74m.js, chunk-cgw80cc0.js, chunk-4svxxqva.js, chunk-xpca4e4z.js, chunk-197xhwvw.js, chunk-0z1mwhtf.js, chunk-txzfc4ar.js, main.js, chunk-3s71etxc.js, chunk-vxhjgegw.js, chunk-w8xtw9td.js, chunk-d71gfyef.js, chunk-vw2yaxs0.js, chunk-5qky6ctf.js, chunk-mqfdvw2d.js, chunk-rdsbhnr5.js, chunk-7x942hn0.js, chunk-g2qmcveg.js, chunk-k7wz01gx.js, chunk-c76h7v56.js, chunk-63b3cjr0.js, chunk-0g8sre5f.js, chunk-9z8mn4t6.js, chunk-axbkkqp1.js, chunk-z1zqw9r4.js, chunk-zqc1134h.js, chunk-c2rrcfwz.js, chunk-hwb0yepw.js, chunk-ax7d0jxq.js, chunk-93zd6g5e.js, chunk-678mefv3.js, chunk-e6kfw3q9.js, chunk-hxzk4hab.js, chunk-z1d4fmva.js, chunk-vj88njay.js, chunk-pz5w324x.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-m8cqm38m.js, chunk-k6wwhsq1.js, chunk-jx46157v.js, chunk-m426z48y.js, chunk-7p2tg1q7.js, chunk-f7rrfen3.js, chunk-dk9qzmrk.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-z8dhvsqj.js, chunk-8n9sz09b.js, chunk-ff3nvh2r.js, chunk-0qmaxw8n.js
onDemand chunk-0g8sre5f.js: identity=11126 gzip=4259 brotli=3885 bytes
critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes
onDemand chunk-m426z48y.js: identity=6744 gzip=3166 brotli=2880 bytes
critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
critical chunk-5qky6ctf.js: identity=1188 gzip=691 brotli=582 bytes
onDemand chunk-7p2tg1q7.js: identity=33394 gzip=12804 brotli=11519 bytes
onDemand chunk-93zd6g5e.js: identity=1170 gzip=707 brotli=628 bytes
onDemand chunk-fgyqkfk9.js: identity=6503 gzip=2410 brotli=2148 bytes
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 10/11. ```text (pass) R2 concurrent first tabs / failed marker / R3 missing locks: no lifetime creation or lock fallback exists [1.09ms] (pass) R2 sign-out between check/write / R3 delayed startup: teardown invalidates old callbacks before later login [0.70ms] (pass) R2 completed capture before 300 ms: unconfirmed tab loss is explicit; confirmed state restores from server [0.51ms] (pass) R2 100 snapshots and 50 ms do not establish a receipt identity or expire uncertainty [65.18ms] (pass) absent, throwing and recovered storage cannot change live edit acceptance [1.75ms] (pass) refused individual intents leave independent tabs and later edits live [0.66ms] (pass) R1 stale unresolved duplicate cannot suppress a completed same-tab birth [1.15ms] src/canvas/model/operations.test.ts: (pass) independent resize and move commute; close survives a stale move [1.02ms] (pass) right split of a stack preserves the upper band [0.30ms] (pass) reorder uses stable neighbours and emits no document [0.96ms] (pass) a completed split emits its semantic intent rather than intermediate sizing edits [0.50ms] (pass) a three-window reorder sends one semantic move [0.31ms] (pass) a split before the first reference is journalled opens its anchor before splitting [0.46ms] (pass) a drop sends the moved membership once, without derived neighbour geometry [0.42ms] (pass) a narrow right split widens first so both halves remain valid [0.56ms] (pass) a short down split grows the anchor first so both halves meet the height floor [0.68ms] src/canvas/model/queue-budget.test.ts: (pass) adjacent same-field unsent edits coalesce; sent requests retain identical identity and input [0.85ms] (pass) byte backpressure reports refusal before changing projection or silently dropping older work [0.48ms] (pass) rejected placeholder cancellation preserves the accepted birth and unresolved dependency [0.76ms] (pass) completed reference size counts toward backpressure without mutating a refused completion [0.70ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.61ms] (pass) a document survives JSON and rebuilds the same columns [0.52ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.20ms] (pass) parseDocument rejects anything that is not a document of this format [0.27ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.19ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.46ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.40ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.08ms] (pass) D309: the saved weights do not depend on how a touch screen draws the columns [0.39ms] (pass) D309: a view this device pushed clear for display is saved where the layout has it [0.16ms] (pass) an offscreen graph keeps its shared pins before any nodes are rendered [0.10ms] (pass) a captured graph document is independent of the next pin drag [0.10ms] src/canvas/model/sync.test.ts: (pass) a pending session never delays other edits or waits for a network receipt [1.44ms] (pass) inventory includes shared memberships that this device cannot render [1.13ms] (pass) temporary flow windows are never treated as unsubmitted shared windows [0.27ms] src/canvas/model/review-span.test.ts: (pass) a down split shifts every column in a transitively connected group [0.35ms] src/canvas/model/reducer-property.test.ts: layout property: 32 seeds, 4096 operations, 4015 accepted, zero divergences (pass) property: accepted random operation sequences match the real server reducer [3025.33ms] src/canvas/model/session-incarnation.test.ts: (pass) reconnect original fences unsent work before the snapshot pump [1.38ms] (pass) reconnect replacement fences unsent work before the snapshot pump [0.65ms] (pass) queued work with no original binding cannot adopt a later incarnation [0.72ms] src/canvas/model/review-boundary-r2.test.ts: review r2 boundary comparison: 8 seeds, 4096 operations, 3198 accepted (pass) review r2: longer boundary-weighted sequences preserve every accepted projection [2088.33ms] src/canvas/model/reconcile.test.ts: (pass) review: removing the current shared view selects a surviving camera anchor [6.06ms] (pass) a remote negative pin and node update preserve the world position of an unchanged card [1.25ms] src/canvas/model/journal-confirmation.test.ts: (pass) hunt 2: uncertain sent edit stays hidden over a newer snapshot until its receipt [0.36ms] (pass) R1 held notification: a receipt above canonical explicitly reveals the overlay [0.16ms] (pass) R2 receiptless identity survives 100 matching snapshots without silent confirmation [0.48ms] (pass) R1 covered receipt is pruned before projecting canonical revision 3 [0.18ms] (pass) duplicate event then late refusal cannot discard independent work [0.17ms] src/canvas/model/server-store-p3-review.test.ts: (pass) review: two successive gaps coalesce while each snapshot is outstanding [0.89ms] (pass) review: a snapshot arriving after newer deltas never rolls back canonical state [0.13ms] (pass) review: outage edits wait for snapshot then send each identity once in order [0.93ms] (pass) review: a 3 s RTT fresh route stays quiet until its complete recovery budget [0.38ms] (pass) review: changed RTT reschedules the notice and successful recovery cancels future notices [0.49ms] (pass) review: recovery before the budget remains quiet across repeated drops and disposal frees timers [2.68ms] (pass) review: an edit first made while offline eventually emits the calm notice [0.39ms] (pass) review: a first-connect outage with no RTT sample cannot hide pending edits forever [0.48ms] (pass) hunt 4: slow snapshots own one watchdog; bounded retries pause offline and disposal cancels them [0.42ms] src/canvas/model/journal.test.ts: (pass) an offline birth keeps its identity through same-tab reference completion [1.34ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [1.04ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.36ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.65ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.61ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.52ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [49.95ms] (pass) review reconnect budget survives sockets that open then close without events [46.27ms] (pass) review explicit retry resumes after the setup feed stops [46.80ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.85ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.19ms] (pass) listed host plus port retains its saved user in the serialized destination [0.25ms] (pass) review listed inventory name plus port retains its resolved address [0.30ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.14ms] (pass) parseSetupEvent > drops anything malformed [0.08ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.05ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.13ms] (pass) foldSetup > a stage that reports done alone still finishes [0.08ms] (pass) foldSetup > ready done completes the run [0.05ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.10ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms] (pass) setupGuide > says the other sessions keep working and what to do next, in plain words [0.13ms] (pass) review malformed setup fields are dropped without coercion errors [0.11ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.19ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.28ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.07ms] (pass) parsing the server's data > an install command needs a lifetime [0.06ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.29ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.27ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.97ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.16ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.09ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [1.00ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.46ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.27ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.27ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [3.27ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.30ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.23ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.22ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.22ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.36ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.07ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms] (pass) authLabel > names the method and a trusted network provider only [0.04ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms] (pass) guideFor > each failure kind names its fix [0.08ms] (pass) guideFor > mesh-policy words say possible, not certain [0.05ms] (pass) parseTarget > reads user, host and port [0.09ms] (pass) parseTarget > reads a pasted ssh command into the same fields [0.93ms] (pass) parseTarget > reads an ssh:// address [0.14ms] (pass) parseTarget > refuses garbage around an ssh command [0.09ms] (pass) parseTarget > refuses what cannot name a host [0.04ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.43ms] (pass) parseSshConfig > recognises config text [0.05ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.04ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.06ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.15ms] (pass) only a completed canonical host identity becomes terminal authority [0.13ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.05ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.06ms] (pass) missing payload tells the operator the architecture and expected server path [0.04ms] (pass) an already added host says so and offers opening its existing terminal [0.27ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.05ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.08ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.07ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.47ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms] (pass) ready CA begins the requested installation mode without another prompt [0.10ms] (pass) closing during CA confirmation never starts an SSH attempt [0.33ms] (pass) a typed root login requires explicit consent before any installation [0.20ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.04ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.02ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.50ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.54ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.20ms] (pass) a chunk that both sides use stays critical [0.20ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.17ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.20ms] (pass) automatic canonical painting loads after the first canvas draw [0.16ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [4.49ms] (pass) compiled recovery UI mode preview obeys its URL boundary [3.22ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [4.01ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [14.24ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [29.52ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.40ms] (pass) abandoned word acknowledgement uploads nothing [4.52ms] (pass) settled acknowledgement cannot upload later (dismissed) [4.14ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.65ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [3.02ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [2.37ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [2.39ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [2.79ms] (pass) malformed or excessive remaining wait -1 is denied [1.90ms] (pass) malformed or excessive remaining wait 0.5 is denied [2.05ms] (pass) malformed or excessive remaining wait 172801 is denied [1.76ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [2.04ms] (pass) malformed or excessive remaining wait 90000 is denied [1.84ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.81ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.43ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms] (pass) the viewer announces the link-doubt capability in its Hello [2.90ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.20ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.03ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.21ms] (pass) routine detach and connection rotation reasons stay neutral [0.02ms] (pass) a stream close that reattaches never says the terminal ended [0.08ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.03ms] (pass) unknown close text is discarded instead of reaching the person or console [0.09ms] (pass) a storm of closes prints one line per minute and counts the rest [0.32ms] (pass) counted closes are reported when their window ends, without another close [0.04ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [1.45ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.10ms] src/onboarding-load.test.ts: (pass) a failed load says so in the error line, offers Try again, and mounts nothing [5.47ms] (pass) the Try again button reloads the page: a failed import stays failed in the module map [5.56ms] (pass) the online event retries by itself [5.29ms] 407 pass 0 fail 22240 expect() calls Ran 407 tests across 72 files. [15.63s] bun test v1.4.2 (744846f84) src/connection-correlation-review.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) Pongs with a matching nonce and a different timestamp cannot retain readiness [13.71ms] src/connection-idle.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 1 [5.13ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 1 [4.23ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 1 streams at RTT 150 [1.76ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) healthy idle probes back off independently of 28 streams at RTT 150 [1.36ms] (pass) unacknowledged input keeps probes fast until the matching stream acknowledges it [6.14ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 1 [2.04ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 1 [1.65ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 1 [1.22ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 1 [1.72ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 30 [1.26ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 30 [1.19ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 30 [1.25ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 30 [1.35ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 0 at RTT 150 [0.93ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 7 at RTT 150 [0.79ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 20 at RTT 150 [0.75ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) idle silence deadline survives probe phase 39 at RTT 150 [0.97ms] (pass) retransmitting an earlier input range cannot forget a later unacknowledged byte [2.97ms] (pass) a delayed first timer starts unknown-RTT grace when its first probe is issued [6.32ms] (pass) a healthy idle route tolerates a 20ms RTT step at 1 streams without consuming its scheduling allowance before probing [2.28ms] (pass) a healthy idle route tolerates a 20ms RTT step at 28 streams without consuming its scheduling allowance before probing [1.83ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 1 streams [2.02ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer on a fully answered route preserves its reply allowance across 28 streams [2.15ms] (pass) a healthy browser route survives 150ms scheduler delay across 1 streams [1.99ms] (pass) a healthy browser route survives 150ms scheduler delay across 28 streams [2.49ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a quiet dead browser peer is detected within two 250ms allowances plus one probe interval [1.85ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) browser jitter allowance decays after a stable link returns [14.31ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with reply first [2.01ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with reply first [1.69ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with reply first [1.61ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 150ms browser event-loop stall with timer first [2.37ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 1000ms browser event-loop stall with timer first [1.82ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued healthy reply survives a 60000ms browser event-loop stall with timer first [1.82ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a late timer without a reply counts subsequent responsive silence [1.78ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) an outstanding probe gets responsive observation after a renderer stall [5.47ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) retirement gives a queued mismatched pong one task turn [2.14ms] (pass) retirement gives a queued correlated pong one task turn [1.63ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead typing route eventually retires when browser tasks run every 75ms [2.00ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 1000ms [1.89ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a dead idle route eventually retires when browser tasks run every 60000ms [1.63ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 75ms task gaps [1.81ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 1000ms task gaps [1.96ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) dead-route stall grace is bounded by two allowances and three 60000ms task gaps [1.98ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) correlated queued replies replenish stall grace across successive healthy stalls [2.33ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) duplicate replies cannot replenish consumed stall grace [2.25ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) wrong timestamp replies cannot replenish consumed stall grace [1.92ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) unknown nonce replies cannot replenish consumed stall grace [1.51ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a queued correlated reply cancels confirmation without letting a duplicate renew it [2.41ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 1 (pass) a replacement route receives its own one-shot local stall grace [2.77ms] Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) continuous typing cannot cancel every silent-route confirmation turn [2.76ms] (pass) a pending confirmation is reset by reconnect [2.68ms] Connection to the server closed after the connection was established: closed by the server, code 1001, reason "other", reconnect attempt 0 (pass) a pending confirmation is reset by close [2.48ms] (pass) a pending confirmation is reset by dispose [2.01ms] (pass) a stale confirmation from before reconnect cannot close the replacement route [2.85ms] (pass) a hidden page resumes its lease after 5000ms without retiring queued replies [3.26ms] (pass) a hidden page resumes its lease after 30000ms without retiring queued replies [2.43ms] (pass) a socket lost while hidden waits for visibility before reconnecting [1.87ms] (pass) mobile jitter and one retransmission keep a foreground browser lease [56.17ms] (pass) visibility notices require both peers to support them: false [0.65ms] (pass) visibility notices require both peers to support them: true [0.40ms] (pass) hiding a page cancels a retry scheduled while it was visible [1.55ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: true [2.29ms] (pass) review: queued replies cannot retire a restored hidden page when visibility dispatch precedes replies: false [2.21ms] (pass) a layout subscription starts the connection before any terminal exists [0.75ms] (pass) resync replaces one subscription ID and disposal prevents later resyncs [1.39ms] (pass) resync reopens a feature subscription with the same server ID [0.60ms] src/connection-layout-removal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a reconnect snapshot removing the current view sends no unbound Close and moves its camera [13.70ms] src/connection-liveness.test.ts: Connection to the server closed after the connection was established: closed by this page, code 4000, reason "connection unresponsive", reconnect attempt 0 (pass) a retained unresponsive route loses readiness, resumes automatically and ignores its late events [2.28ms] src/connection-pool.test.ts: (pass) terminals fill the first socket, then open another, and a released slot is reused first [0.55ms] (pass) 54 windows need two sockets, and the pool stops opening sockets at its cap [0.66ms] src/connection-probe-scheduling-review.test.ts: (pass) a fully answered browser route survives a delayed next probe before a terminal attaches [0.93ms] (pass) a fully answered browser route survives a delayed next probe with an attachment [0.68ms] src/connection-query-capabilities.test.ts: (pass) query replies negotiate independently with Hello caps 0 [0.13ms] (pass) query replies negotiate independently with Hello caps 4 (pass) query replies negotiate independently with Hello caps 8 (pass) query replies negotiate independently with Hello caps 12 src/connection-query-refusal.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: false) [13.18ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) pending query stays reply-marked through refusal and explicit resend (previously sent: true) [4.11ms] src/connection-restart.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 Connection to the server closed before the connection was established (reconnect failed): closed by the server or network, code 0, reason "none", reconnect attempt 1 (pass) an overnight connection retains its writer and pending input when the server restarts [1.21ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a second quick server close leaves the fast path and backs off [0.86ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) a failed first recovery handshake exits the one quick retry [0.75ms] Connection to the server closed after the connection was established: closed by the server, code 1011, reason "connection ended", reconnect attempt 0 (pass) a server close reason survives socket retirement and the next retry [0.90ms] Connection to the server closed after the connection was established: closed by the server or network, code 1005, reason "none", reconnect attempt 0 (pass) a clean server socket close keeps its fallback reason through the next retry [1.11ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) a prolonged outage inside the fast-recovery window does not leave recovery behind accumulated backoff [15.12ms] Connection to the server closed after the connection was established: closed by the server or network, code 1006, reason "none", reconnect attempt 0 (pass) online and foreground events cancel delays and preserve handshakes in progress [2.42ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: true) [1.05ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: false, resume first: false) [0.38ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: true) [0.31ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: true, new hint: true, resume first: false) [0.25ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: true) [0.25ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: false, resume first: false) [0.22ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 1 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: true) [0.32ms] Connection to the server closed before the connection was established (reconnect failed): closed by the server, code 1008, reason "the server refused to resume the connection", reconnect attempt 0 (pass) refused handshakes keep growing backoff (online: false, new hint: true, resume first: false) [0.28ms] src/connection-review-refusal-input.test.ts: Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: false) [3.48ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review: refusal fallback preserves typing through explicit resend (previously sent: true) [1.75ms] src/connection-review-retained-lifetime.test.ts: (pass) review: saved typing can be declined without closing the live shell [1.06ms] (pass) review: new typing reaches the fresh shell while saved typing stays pending [0.22ms] (pass) review: retained input and consent are local to their terminal window [0.16ms] (pass) review: selecting a different session removes saved typing and its action [0.14ms] (pass) review: another refused writer retains pending and unacknowledged fresh typing [0.16ms] (pass) review: window disposal clears held input and rejects a stale resend action [0.57ms] src/connection-startup-review.test.ts: (pass) a healthy startup route can learn an RTT above the initial estimate [12.69ms] src/connection-unattached-close.test.ts: (pass) disposing a window before its welcome microtask sends no unbound Close [1.73ms] Connection to the server closed after the connection was established: closed by the server or network, code 0, reason "none", reconnect attempt 0 (pass) review #250: disposing a previously attached window during reconnect sends no unbound Close [1.42ms] 105 pass 0 fail 413 expect() calls Ran 105 tests across 13 files. [385.00ms] bun test v1.4.2 (744846f84) src/terminal-queries.test.ts: (pass) query identity survives split writes and tracks nested ESC independently of a cancelled string [0.74ms] (pass) all requested query families have identities [0.21ms] (pass) every split preserves one identity and oversized strings retain nested boundaries without retaining their contents [1.90ms] (pass) oversized OSC retains BEL termination before a later query [0.17ms] src/terminal-query-property.test.ts: [ghostty-vt] warning(stream): invalid device status report command: ESC [ ? { 6 } n [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x11 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 [ghostty-vt] warning(stream): invalid C0 character, ignoring: 0x13 QUERY_PROPERTY forms=30 splits=515 viewers=3 accepted=1 duplicates=2 (pass) every renderer-answered form produces exactly one admitted reply for every split with three viewers [563.50ms] src/terminal-query-renderer-review.test.ts: (pass) review: DECID gives every real renderer response an identity [1.25ms] (pass) review: zero-padded CPR gives every real renderer response an identity [2.44ms] (pass) review: CPR with an ignored NUL gives every real renderer response an identity [0.35ms] (pass) review: three adjacent requests keep distinct identities across different viewer chunking [8.93ms] src/terminal-write-slices.test.ts: (pass) every slice split preserves cells, cursor and all renderer answers [41.61ms] (pass) invalid or incomplete ranges never feed unexpected bytes and leave later writes usable [2.22ms] (pass) escaped writers cannot access released input and callback failure releases the scope [0.71ms] (pass) nested writes and memory growth cannot replace borrowed input [0.41ms] (pass) allocation refusal never writes or frees unowned memory [2.14ms] (pass) empty scopes accept no input and reject later writer use [0.37ms] (pass) input views of native memory survive allocation-driven memory growth [0.38ms] (pass) throwing callbacks release exactly their owned input allocation [0.41ms] 17 pass 0 fail 1794 expect() calls Ran 17 tests across 4 files. [668.00ms] $ bun run build.ts built chunk-dnht0vhh.js, chunk-jzq6yp23.js, chunk-fgyqkfk9.js, chunk-w5n5wcq2.js, chunk-nmrx4qqv.js, chunk-szns5x6a.js, chunk-y8f5htph.js, chunk-na49xj9e.js, chunk-xycr6ryq.js, chunk-tj8daj0z.js, chunk-gxvqf3b8.js, chunk-warvf74m.js, chunk-cgw80cc0.js, chunk-4svxxqva.js, chunk-xpca4e4z.js, chunk-197xhwvw.js, chunk-0z1mwhtf.js, chunk-txzfc4ar.js, main.js, chunk-3s71etxc.js, chunk-vxhjgegw.js, chunk-w8xtw9td.js, chunk-d71gfyef.js, chunk-vw2yaxs0.js, chunk-5qky6ctf.js, chunk-mqfdvw2d.js, chunk-rdsbhnr5.js, chunk-7x942hn0.js, chunk-g2qmcveg.js, chunk-k7wz01gx.js, chunk-c76h7v56.js, chunk-63b3cjr0.js, chunk-0g8sre5f.js, chunk-9z8mn4t6.js, chunk-axbkkqp1.js, chunk-z1zqw9r4.js, chunk-zqc1134h.js, chunk-c2rrcfwz.js, chunk-hwb0yepw.js, chunk-ax7d0jxq.js, chunk-93zd6g5e.js, chunk-678mefv3.js, chunk-e6kfw3q9.js, chunk-hxzk4hab.js, chunk-z1d4fmva.js, chunk-vj88njay.js, chunk-pz5w324x.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, chunk-ga7n3p96.js, chunk-m8cqm38m.js, chunk-k6wwhsq1.js, chunk-jx46157v.js, chunk-m426z48y.js, chunk-7p2tg1q7.js, chunk-f7rrfen3.js, chunk-dk9qzmrk.js, chunk-gvddkj3j.js, chunk-exbzms9n.js, chunk-mz1hmdma.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, offline.worker.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-z8dhvsqj.js, chunk-8n9sz09b.js, chunk-ff3nvh2r.js, chunk-0qmaxw8n.js onDemand chunk-0g8sre5f.js: identity=11126 gzip=4259 brotli=3885 bytes critical chunk-c76h7v56.js: identity=52 gzip=52 brotli=52 bytes onDemand chunk-m426z48y.js: identity=6744 gzip=3166 brotli=2880 bytes critical chunk-exbzms9n.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes critical chunk-5qky6ctf.js: identity=1188 gzip=691 brotli=582 bytes onDemand chunk-7p2tg1q7.js: identity=33394 gzip=12804 brotli=11519 bytes onDemand chunk-93zd6g5e.js: identity=1170 gzip=707 brotli=628 bytes onDemand chunk-fgyqkfk9.js: identity=6503 gzip=2410 brotli=2148 bytes ```
Author
Owner

Final scripts/verify fast on 7e2490f075: exit 0. Verbatim transcript 11/11.

critical chunk-vw2yaxs0.js: identity=2161 gzip=1059 brotli=906 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
onDemand chunk-678mefv3.js: identity=1649 gzip=775 brotli=675 bytes
onDemand chunk-0qmaxw8n.js: identity=1063 gzip=649 brotli=516 bytes
critical chunk-xpca4e4z.js: identity=17631 gzip=6249 brotli=5571 bytes
onDemand chunk-9z8mn4t6.js: identity=1026 gzip=622 brotli=497 bytes
onDemand chunk-vj88njay.js: identity=4696 gzip=1951 brotli=1726 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=558 brotli=486 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes
critical chunk-d71gfyef.js: identity=1776 gzip=854 brotli=693 bytes
onDemand chunk-hxzk4hab.js: identity=11562 gzip=4695 brotli=4279 bytes
deferred chunk-k7wz01gx.js: identity=127434 gzip=42763 brotli=37529 bytes
onDemand chunk-hwb0yepw.js: identity=2824 gzip=1384 brotli=1191 bytes
critical chunk-4svxxqva.js: identity=6075 gzip=2537 brotli=2230 bytes
onDemand chunk-xycr6ryq.js: identity=3891 gzip=1735 brotli=1504 bytes
onDemand chunk-ax7d0jxq.js: identity=2522 gzip=1134 brotli=967 bytes
deferred chunk-g2qmcveg.js: identity=1537 gzip=793 brotli=722 bytes
deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes
onDemand chunk-cgw80cc0.js: identity=2420 gzip=1196 brotli=1077 bytes
onDemand chunk-e6kfw3q9.js: identity=540 gzip=353 brotli=319 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-c2rrcfwz.js: identity=6148 gzip=2783 brotli=2514 bytes
onDemand chunk-jzq6yp23.js: identity=191 gzip=169 brotli=127 bytes
onDemand chunk-mqfdvw2d.js: identity=2557 gzip=1178 brotli=1006 bytes
critical chunk-tj8daj0z.js: identity=707 gzip=366 brotli=305 bytes
onDemand chunk-y8f5htph.js: identity=6265 gzip=2100 brotli=1863 bytes
critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes
onDemand chunk-7x942hn0.js: identity=2007 gzip=1003 brotli=856 bytes
onDemand chunk-z1zqw9r4.js: identity=10904 gzip=4425 brotli=4033 bytes
critical chunk-zqc1134h.js: identity=729523 gzip=210465 brotli=170925 bytes
critical chunk-txzfc4ar.js: identity=386 gzip=236 brotli=195 bytes
critical chunk-vxhjgegw.js: identity=1106 gzip=665 brotli=604 bytes
critical chunk-f7rrfen3.js: identity=199 gzip=160 brotli=139 bytes
critical chunk-dk9qzmrk.js: identity=43095 gzip=14744 brotli=13224 bytes
onDemand chunk-w5n5wcq2.js: identity=5812 gzip=2379 brotli=2143 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-z8dhvsqj.js: identity=9158 gzip=3336 brotli=2891 bytes
onDemand chunk-rdsbhnr5.js: identity=4594 gzip=2012 brotli=1784 bytes
onDemand chunk-warvf74m.js: identity=228 gzip=179 brotli=159 bytes
critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-197xhwvw.js: identity=12197 gzip=4853 brotli=4324 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
critical chunk-0z1mwhtf.js: identity=2529 gzip=1018 brotli=886 bytes
onDemand chunk-m8cqm38m.js: identity=49320 gzip=15450 brotli=13778 bytes
onDemand chunk-z1d4fmva.js: identity=5359 gzip=2582 brotli=2308 bytes
onDemand chunk-pz5w324x.js: identity=7662 gzip=3398 brotli=2962 bytes
critical chunk-dnht0vhh.js: identity=35402 gzip=10317 brotli=9258 bytes
deferred chunk-nmrx4qqv.js: identity=38188 gzip=13890 brotli=12423 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=104625 gzip=38519 brotli=33287 bytes
critical chunk-jx46157v.js: identity=162 gzip=150 brotli=145 bytes
onDemand chunk-na49xj9e.js: identity=2108 gzip=1038 brotli=870 bytes
onDemand chunk-k6wwhsq1.js: identity=6983 gzip=3101 brotli=2814 bytes
critical chunk-w8xtw9td.js: identity=8377 gzip=3575 brotli=3187 bytes
critical chunk-szns5x6a.js: identity=5890 gzip=2462 brotli=2140 bytes
critical chunk-8n9sz09b.js: identity=9907 gzip=4060 brotli=3495 bytes
critical chunk-3s71etxc.js: identity=5448 gzip=2606 brotli=2374 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
onDemand chunk-63b3cjr0.js: identity=14598 gzip=5444 brotli=4891 bytes
critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
JavaScript transfer, critical: identity=990237 gzip=306847/307200 brotli=255559/256000 bytes
JavaScript transfer, deferred: identity=168499 gzip=58128/61440 brotli=51265/55296 bytes
JavaScript transfer, onDemand: identity=231921 gzip=91880/20480 brotli=81936/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-m8cqm38m.js: gzip=15450/20480 brotli=13778/18432 bytes (class total gzip=91880 brotli=81936, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.78ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.61ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.22ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.22ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.42ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [8.57ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.24ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.84ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms]
(pass) split mux header preserves trailing Close [0.16ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.64ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.09ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.64ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.98ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.75ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.60ms]
(pass) superseded failure preserves a newer pending refresh [2.95ms]

src/stream.test.ts:
stream differential: 169 streams, 19929 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5910.94ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [8.99ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.03ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [22.77ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.20ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.31ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.73ms]
(pass) review continuation stops after forbidden [1.38ms]
(pass) review continuation stops after superseded [1.31ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.43ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.20ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.24ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [2.28ms]
(pass) watch never publishes a partial page; withdrawn=true [1.62ms]
(pass) a superseding equal-revision resync wins over pending page assembly [2.48ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.35ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [3.17ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [24.89ms]
(pass) shared Mesh event vectors drive the typed watch adapter [6.08ms]

 39 pass
 0 fail
 59970 expect() calls
Ran 39 tests across 10 files. [6.09s]
Final `scripts/verify fast` on 7e2490f075fcbb5fd5e429c87d204d38cf220967: exit 0. Verbatim transcript 11/11. ```text critical chunk-vw2yaxs0.js: identity=2161 gzip=1059 brotli=906 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes onDemand chunk-678mefv3.js: identity=1649 gzip=775 brotli=675 bytes onDemand chunk-0qmaxw8n.js: identity=1063 gzip=649 brotli=516 bytes critical chunk-xpca4e4z.js: identity=17631 gzip=6249 brotli=5571 bytes onDemand chunk-9z8mn4t6.js: identity=1026 gzip=622 brotli=497 bytes onDemand chunk-vj88njay.js: identity=4696 gzip=1951 brotli=1726 bytes critical faulty-terminal.worker.js: identity=1086 gzip=558 brotli=486 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes critical chunk-d71gfyef.js: identity=1776 gzip=854 brotli=693 bytes onDemand chunk-hxzk4hab.js: identity=11562 gzip=4695 brotli=4279 bytes deferred chunk-k7wz01gx.js: identity=127434 gzip=42763 brotli=37529 bytes onDemand chunk-hwb0yepw.js: identity=2824 gzip=1384 brotli=1191 bytes critical chunk-4svxxqva.js: identity=6075 gzip=2537 brotli=2230 bytes onDemand chunk-xycr6ryq.js: identity=3891 gzip=1735 brotli=1504 bytes onDemand chunk-ax7d0jxq.js: identity=2522 gzip=1134 brotli=967 bytes deferred chunk-g2qmcveg.js: identity=1537 gzip=793 brotli=722 bytes deferred offline.worker.js: identity=1340 gzip=682 brotli=591 bytes onDemand chunk-cgw80cc0.js: identity=2420 gzip=1196 brotli=1077 bytes onDemand chunk-e6kfw3q9.js: identity=540 gzip=353 brotli=319 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-c2rrcfwz.js: identity=6148 gzip=2783 brotli=2514 bytes onDemand chunk-jzq6yp23.js: identity=191 gzip=169 brotli=127 bytes onDemand chunk-mqfdvw2d.js: identity=2557 gzip=1178 brotli=1006 bytes critical chunk-tj8daj0z.js: identity=707 gzip=366 brotli=305 bytes onDemand chunk-y8f5htph.js: identity=6265 gzip=2100 brotli=1863 bytes critical chunk-ff3nvh2r.js: identity=167 gzip=134 brotli=112 bytes onDemand chunk-7x942hn0.js: identity=2007 gzip=1003 brotli=856 bytes onDemand chunk-z1zqw9r4.js: identity=10904 gzip=4425 brotli=4033 bytes critical chunk-zqc1134h.js: identity=729523 gzip=210465 brotli=170925 bytes critical chunk-txzfc4ar.js: identity=386 gzip=236 brotli=195 bytes critical chunk-vxhjgegw.js: identity=1106 gzip=665 brotli=604 bytes critical chunk-f7rrfen3.js: identity=199 gzip=160 brotli=139 bytes critical chunk-dk9qzmrk.js: identity=43095 gzip=14744 brotli=13224 bytes onDemand chunk-w5n5wcq2.js: identity=5812 gzip=2379 brotli=2143 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-z8dhvsqj.js: identity=9158 gzip=3336 brotli=2891 bytes onDemand chunk-rdsbhnr5.js: identity=4594 gzip=2012 brotli=1784 bytes onDemand chunk-warvf74m.js: identity=228 gzip=179 brotli=159 bytes critical chunk-mz1hmdma.js: identity=49 gzip=49 brotli=49 bytes critical chunk-197xhwvw.js: identity=12197 gzip=4853 brotli=4324 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes critical chunk-0z1mwhtf.js: identity=2529 gzip=1018 brotli=886 bytes onDemand chunk-m8cqm38m.js: identity=49320 gzip=15450 brotli=13778 bytes onDemand chunk-z1d4fmva.js: identity=5359 gzip=2582 brotli=2308 bytes onDemand chunk-pz5w324x.js: identity=7662 gzip=3398 brotli=2962 bytes critical chunk-dnht0vhh.js: identity=35402 gzip=10317 brotli=9258 bytes deferred chunk-nmrx4qqv.js: identity=38188 gzip=13890 brotli=12423 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=104625 gzip=38519 brotli=33287 bytes critical chunk-jx46157v.js: identity=162 gzip=150 brotli=145 bytes onDemand chunk-na49xj9e.js: identity=2108 gzip=1038 brotli=870 bytes onDemand chunk-k6wwhsq1.js: identity=6983 gzip=3101 brotli=2814 bytes critical chunk-w8xtw9td.js: identity=8377 gzip=3575 brotli=3187 bytes critical chunk-szns5x6a.js: identity=5890 gzip=2462 brotli=2140 bytes critical chunk-8n9sz09b.js: identity=9907 gzip=4060 brotli=3495 bytes critical chunk-3s71etxc.js: identity=5448 gzip=2606 brotli=2374 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes onDemand chunk-63b3cjr0.js: identity=14598 gzip=5444 brotli=4891 bytes critical chunk-gvddkj3j.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes JavaScript transfer, critical: identity=990237 gzip=306847/307200 brotli=255559/256000 bytes JavaScript transfer, deferred: identity=168499 gzip=58128/61440 brotli=51265/55296 bytes JavaScript transfer, onDemand: identity=231921 gzip=91880/20480 brotli=81936/18432 bytes JavaScript transfer, onDemand largest chunk chunk-m8cqm38m.js: gzip=15450/20480 brotli=13778/18432 bytes (class total gzip=91880 brotli=81936, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.78ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.61ms] (pass) subscription not found ends delivery before a late refresh rejection [1.22ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.22ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.15ms] (pass) synchronous subscription refusal releases the transport exactly once [0.42ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [8.57ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.24ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.84ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.18ms] (pass) split mux header preserves trailing Close [0.16ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.64ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.09ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.64ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.98ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.75ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.60ms] (pass) superseded failure preserves a newer pending refresh [2.95ms] src/stream.test.ts: stream differential: 169 streams, 19929 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [5910.94ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [8.99ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.03ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [22.77ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.20ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.31ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.73ms] (pass) review continuation stops after forbidden [1.38ms] (pass) review continuation stops after superseded [1.31ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.43ms] (pass) a changed revision discards earlier pages before assembling its restart [0.20ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.24ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [2.28ms] (pass) watch never publishes a partial page; withdrawn=true [1.62ms] (pass) a superseding equal-revision resync wins over pending page assembly [2.48ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.35ms] (pass) authoritative resync keeps priority over an equal-revision pending list [3.17ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [24.89ms] (pass) shared Mesh event vectors drive the typed watch adapter [6.08ms] 39 pass 0 fail 59970 expect() calls Ran 39 tests across 10 files. [6.09s] ```
Author
Owner

Implementation handoff: branch layout-per-tab-250, pushed head 7e2490f075fcbb5fd5e429c87d204d38cf220967, clean worktree; no dev merge or deployment.

Round-1 fixes: server-enforced authenticated-session incarnation, queued-work discard across account/session changes, distinct-edit coalescing, anonymous hint storage and sign-out cleanup, shared touch-toolbar behavior, and authoritative replay-complete attachment bookkeeping. The exact attachment-count check remains; a live-window precondition was added. The review commits were merged first. All five newly supplied review files are byte-unchanged from ea22fc9ce; the retained Chromium suite passed 40 tests with one perf-only skip. Commit bodies identify findings and rejected alternatives.

Final scripts/verify fast: exit 0 on this head, no load exceptions. The complete output is quoted verbatim in the preceding eleven numbered comments and attached below. Both final gate artifacts equal the measured artifact hashes. D243 sequential pinned same-recipe comparison against origin/dev 2fb412d01dcecb81f1f556d18d0350e70644a615:

Image baseline bytes final bytes / exact cap growth
x86_64 musl 21,431,472 21,434,576 3,104
aarch64 musl 19,605,896 19,610,728 4,832

Final static executable + final production UI: Chromium 7/7 (including suspended tabs across two accounts and sign-out/sign-in as the same account); WebKit 5/5 (unchanged touch/storage reviews, both-theme focus and single activation). Production screenshots below are attached for owner review; no visual-quality judgment is claimed.

Qualification limits remain explicit: the earlier broad external WebKit run was 29 passed / 6 failed / one perf-only skip, with five unsupported CDP/wheel cases excluded (all pass in Chromium). The six-case recheck passed three with the prior kit and one on head. Those failures are documented in the earlier WebKit evidence; this handoff does not claim that the broad suite is green or all failures are baseline-equivalent.

Rebuilt relay kit SHA256: 361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7.
The artifact contains the final static x86 image, the final gate's production dist, the bundled current apps/tracer/real/perf-restart.ts, and the same fixture/dependency contents as the earlier kit. Bundle command: bun build apps/tracer/real/perf-restart.ts --target=node --packages=external --outfile=<kit>/apps/tracer/real/perf-restart.js.

Supplemental Node run with this final static executable and production UI, normal UID: FUNCTIONAL_NODE_RESTART sessions=1 mode=daemon PASS, with exact attachment/retained-screen/queued-typing checks intact and no timing measurements enabled.

Requested build-host namespace attempt used unshare --user --map-root-user --mount, private mount propagation and private tmpfs /run/infraternal. It exits 1 before restart because the terminal remains connecting. This host denies os.setgroups([0]) with EPERM in that mapped-root namespace; crates/infraternal-shim/src/pty.rs:227 requires that operation for its root PTY child. The direct OS proof and actual final-kit attempt are attached. Production privilege handling was not weakened. This is not a passing perf result; the root perf-VM matrix remains for the orchestrator.

After extracting the kit on perf-test-03, use the existing root private mount namespace with private tmpfs /run/infraternal and the supplied PLAYWRIGHT_BROWSERS_PATH. Do not hide all /run, because the global perf lock may live there. Exact one-case command (retain the orchestrator's matrix variations):

RESTART_MEASURE=1 REAL_ROOT_NAMESPACE=1 RESTART_SESSIONS=1 RESTART_MODE=daemon RESTART_UNLOCK=0 REAL_ONE_WAY_MS=150 TRACER_TEST_PORT=4458 INFRATERNAL_BIN="$PWD/infraternal" TRACER_DIST="$PWD/apps/tracer/dist" /usr/local/bin/perf-lock.sh node apps/tracer/real/perf-restart.js

Cleanup: required CARGO_TARGET_DIR deleted; temporary baseline worktree and owned runtime directories/alias removed; fixture-owned shims cleaned; no remaining job executable processes. Evidence and kit retained outside the repository. Issue left open.

verify-fast-final.log

layout-production-recovery-fix-250.tgz
perf-kit-sha256.txt
final-chromium.log
final-webkit.log
final-functional-node.log
final-kit-namespace.log
mapped-root-groups.log
cleanup.log
touch-chromium-ink-1440.png
touch-chromium-ink-375.png
touch-chromium-ink-393.png
touch-chromium-paper-1440.png
touch-chromium-paper-375.png
touch-chromium-paper-393.png
touch-webkit-ink-1440.png
touch-webkit-ink-375.png
touch-webkit-ink-393.png
touch-webkit-paper-1440.png
touch-webkit-paper-375.png
touch-webkit-paper-393.png

cleanup.log

Implementation handoff: branch `layout-per-tab-250`, pushed head `7e2490f075fcbb5fd5e429c87d204d38cf220967`, clean worktree; no dev merge or deployment. Round-1 fixes: server-enforced authenticated-session incarnation, queued-work discard across account/session changes, distinct-edit coalescing, anonymous hint storage and sign-out cleanup, shared touch-toolbar behavior, and authoritative replay-complete attachment bookkeeping. The exact attachment-count check remains; a live-window precondition was added. The review commits were merged first. All five newly supplied review files are byte-unchanged from `ea22fc9ce`; the retained Chromium suite passed 40 tests with one perf-only skip. Commit bodies identify findings and rejected alternatives. Final `scripts/verify fast`: exit 0 on this head, no load exceptions. The complete output is quoted verbatim in the preceding eleven numbered comments and attached below. Both final gate artifacts equal the measured artifact hashes. D243 sequential pinned same-recipe comparison against origin/dev `2fb412d01dcecb81f1f556d18d0350e70644a615`: | Image | baseline bytes | final bytes / exact cap | growth | | --- | ---: | ---: | ---: | | x86_64 musl | 21,431,472 | 21,434,576 | 3,104 | | aarch64 musl | 19,605,896 | 19,610,728 | 4,832 | Final static executable + final production UI: Chromium 7/7 (including suspended tabs across two accounts and sign-out/sign-in as the same account); WebKit 5/5 (unchanged touch/storage reviews, both-theme focus and single activation). Production screenshots below are attached for owner review; no visual-quality judgment is claimed. Qualification limits remain explicit: the earlier broad external WebKit run was 29 passed / 6 failed / one perf-only skip, with five unsupported CDP/wheel cases excluded (all pass in Chromium). The six-case recheck passed three with the prior kit and one on head. Those failures are documented in the earlier WebKit evidence; this handoff does not claim that the broad suite is green or all failures are baseline-equivalent. Rebuilt relay kit SHA256: `361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7`. The artifact contains the final static x86 image, the final gate's production dist, the bundled current `apps/tracer/real/perf-restart.ts`, and the same fixture/dependency contents as the earlier kit. Bundle command: `bun build apps/tracer/real/perf-restart.ts --target=node --packages=external --outfile=<kit>/apps/tracer/real/perf-restart.js`. Supplemental Node run with this final static executable and production UI, normal UID: `FUNCTIONAL_NODE_RESTART sessions=1 mode=daemon PASS`, with exact attachment/retained-screen/queued-typing checks intact and no timing measurements enabled. Requested build-host namespace attempt used `unshare --user --map-root-user --mount`, private mount propagation and private tmpfs `/run/infraternal`. It exits 1 before restart because the terminal remains `connecting`. This host denies `os.setgroups([0])` with EPERM in that mapped-root namespace; `crates/infraternal-shim/src/pty.rs:227` requires that operation for its root PTY child. The direct OS proof and actual final-kit attempt are attached. Production privilege handling was not weakened. This is not a passing perf result; the root perf-VM matrix remains for the orchestrator. After extracting the kit on perf-test-03, use the existing root private mount namespace with private tmpfs `/run/infraternal` and the supplied `PLAYWRIGHT_BROWSERS_PATH`. Do not hide all `/run`, because the global perf lock may live there. Exact one-case command (retain the orchestrator's matrix variations): ```sh RESTART_MEASURE=1 REAL_ROOT_NAMESPACE=1 RESTART_SESSIONS=1 RESTART_MODE=daemon RESTART_UNLOCK=0 REAL_ONE_WAY_MS=150 TRACER_TEST_PORT=4458 INFRATERNAL_BIN="$PWD/infraternal" TRACER_DIST="$PWD/apps/tracer/dist" /usr/local/bin/perf-lock.sh node apps/tracer/real/perf-restart.js ``` Cleanup: required CARGO_TARGET_DIR deleted; temporary baseline worktree and owned runtime directories/alias removed; fixture-owned shims cleaned; no remaining job executable processes. Evidence and kit retained outside the repository. Issue left open. [verify-fast-final.log](https://git.kayg.org/attachments/6a3d26d7-146c-40a5-a8b9-22aac0b088f9) [layout-production-recovery-fix-250.tgz](https://git.kayg.org/attachments/5cb7d6ae-f662-456d-b2c1-34dafc9b27aa) [perf-kit-sha256.txt](https://git.kayg.org/attachments/e05edff8-91c3-4978-a74e-9b8bf2876939) [final-chromium.log](https://git.kayg.org/attachments/9d1ab40d-6c5e-4a11-b190-7466eb6d6d29) [final-webkit.log](https://git.kayg.org/attachments/1586c81e-0d1b-4496-bd59-83f389fb89fa) [final-functional-node.log](https://git.kayg.org/attachments/9b7815ad-6647-4e2c-a453-d17d8e53b5b9) [final-kit-namespace.log](https://git.kayg.org/attachments/1d9f2adb-da44-4e5e-97df-799a5eeb9f27) [mapped-root-groups.log](https://git.kayg.org/attachments/bcd45b6f-2370-46a9-b041-5299ce2cd54c) [cleanup.log](https://git.kayg.org/attachments/e2c57b18-1eb5-4440-85d0-b378a622233b) ![touch-chromium-ink-1440.png](https://git.kayg.org/attachments/a9bde39f-88a1-4087-8444-96d78cea73dd) ![touch-chromium-ink-375.png](https://git.kayg.org/attachments/660ed9c1-3de4-472a-9955-a1d2650470e0) ![touch-chromium-ink-393.png](https://git.kayg.org/attachments/be239c72-756e-4a95-b975-b495e3f8c8f4) ![touch-chromium-paper-1440.png](https://git.kayg.org/attachments/8e69bfe2-e031-41ba-a7ef-c5488774a9e9) ![touch-chromium-paper-375.png](https://git.kayg.org/attachments/2bbc9cc9-1c2b-4719-a9e9-f8accd127d3a) ![touch-chromium-paper-393.png](https://git.kayg.org/attachments/bd6f0ecc-3a43-473d-87af-7bffc26f4402) ![touch-webkit-ink-1440.png](https://git.kayg.org/attachments/e1fff4fb-e868-4081-86e8-723ef8f95168) ![touch-webkit-ink-375.png](https://git.kayg.org/attachments/aaa78c23-00ae-4c15-8087-89739db04bf5) ![touch-webkit-ink-393.png](https://git.kayg.org/attachments/85aeca01-05ef-46d4-a9ea-91dc6f783ce8) ![touch-webkit-paper-1440.png](https://git.kayg.org/attachments/55c97200-c7f6-4b99-933f-3f21c7e88099) ![touch-webkit-paper-375.png](https://git.kayg.org/attachments/aa04c000-5a29-4810-bfc9-b7d879768a5e) ![touch-webkit-paper-393.png](https://git.kayg.org/attachments/6356765f-3b3f-4f98-b122-372c4a41b9cc) [cleanup.log](https://git.kayg.org/attachments/576e02ea-ecb9-4283-88f3-d7d6a6446caf)
Author
Owner

Independent delta review round 2 starting on local branch review-layout-per-tab-250-r2, detached target/base 7e2490f075. Reviewing R250-01–04 closure, session lifetime boundaries, retained functional tests and broader WebKit failures against dev 2fb412d01, pinned static sizes and final fast. Tests/evidence only; no fix, push, deploy or perf-VM run.

Independent delta review round 2 starting on local branch review-layout-per-tab-250-r2, detached target/base 7e2490f075fcbb5fd5e429c87d204d38cf220967. Reviewing R250-01–04 closure, session lifetime boundaries, retained functional tests and broader WebKit failures against dev 2fb412d01, pinned static sizes and final fast. Tests/evidence only; no fix, push, deploy or perf-VM run.
Author
Owner

Perf matrix attempt 2 on perf-test-03 (kit 361fac63…): all 9 cases fail before measuring, so there are no numbers.

Same setup as before: real root, unshare --mount --propagation private, a private tmpfs on /run/infraternal, the driver under perf-lock.sh + systemd-run --scope --slice=perf.slice, user-local Chromium, and the documented env including RESTART_UNLOCK=0 TRACER_TEST_PORT=4458. Every case stops at the first window:

restart fixture: CA initialized
ExpectError: expect(locator).toHaveAttribute(expected) failed
Locator:  locator('.cl[data-view="console"] .ui-window').first()
Expected: "live"   Received: "connecting"   Timeout: 5000ms

It also failed with the state tmpfs owned by root (mode 0755) instead of uid 1002, so directory ownership isn't the cause. The previous kit (1543f3fb0) got past this point on the same VM and the same setup, and only failed later, at the attach count. So this head or kit stops the terminal from reaching live when the run is real root in a private mount namespace, which is the configuration the measurement requires (RESTART_MEASURE=1 needs REAL_ROOT_NAMESPACE=1).

The owner allows real root on the build VMs, so the next #250 round should reproduce this exactly on 8by64 (as root via sudo/netbird root, in the same private mount namespace with a private /run/infraternal, the real driver and real Chromium), instead of the mapped-root namespace that hit setgroups EPERM. It then proves one case passes before the kit comes back. This blocks perf qualification, but not functional review.

**Perf matrix attempt 2 on perf-test-03 (kit `361fac63…`): all 9 cases fail before measuring, so there are no numbers.** Same setup as before: real root, `unshare --mount --propagation private`, a private tmpfs on `/run/infraternal`, the driver under `perf-lock.sh` + `systemd-run --scope --slice=perf.slice`, user-local Chromium, and the documented env including `RESTART_UNLOCK=0 TRACER_TEST_PORT=4458`. Every case stops at the first window: ``` restart fixture: CA initialized ExpectError: expect(locator).toHaveAttribute(expected) failed Locator: locator('.cl[data-view="console"] .ui-window').first() Expected: "live" Received: "connecting" Timeout: 5000ms ``` It also failed with the state tmpfs owned by root (mode 0755) instead of uid 1002, so directory ownership isn't the cause. The previous kit (1543f3fb0) got past this point on the same VM and the same setup, and only failed later, at the attach count. So this head or kit stops the terminal from reaching `live` when the run is real root in a private mount namespace, which is the configuration the measurement requires (`RESTART_MEASURE=1` needs `REAL_ROOT_NAMESPACE=1`). The owner allows **real root on the build VMs**, so the next #250 round should reproduce this exactly on 8by64 (as root via sudo/netbird root, in the same private mount namespace with a private /run/infraternal, the real driver and real Chromium), instead of the mapped-root namespace that hit `setgroups` EPERM. It then proves one case passes before the kit comes back. This blocks perf qualification, but not functional review.
Author
Owner

Round-2 review progress on target 7e2490f07: unchanged coalescing/identity review tests plus current incarnation model controls pass 5/5, 23 assertions. All five round-1 added review files are byte-unchanged from ea22fc9ce. New strict real-spec type check passes; raw-wire/restart and resumed-screen probes are prepared.

Original old-journal R1/R2/R3 test bytes were also loaded against the replacement implementation: R1 cannot import layoutJournalKeys; R2 cannot import layoutJournalKey; R3 cannot import layoutLifetimeKey/storage-journal. These are removed D312 storage APIs, not behavioral passes. Current replacement failure-table coverage will be rerun. The requirement that those obsolete original sources all pass unchanged cannot literally be claimed.

Fetched origin/dev is db8c1bdf6, differing from requested browser baseline 2fb412d01 only in DECISIONS.md (D313); production/native build inputs are identical. Comparison builds remain pinned to 2fb412d01.

Initial fast attempt failed before tests because shared sccache retained deleted TMPDIR /home/agent/.cache/codex-scratch/l. Private cache socket selected; final run uses a physical 34-byte TMPDIR/state root (one intermediate compilation interrupted before tests to shorten it). No failure waived. No push/deploy/perf-VM runs.

Round-2 review progress on target 7e2490f07: unchanged coalescing/identity review tests plus current incarnation model controls pass 5/5, 23 assertions. All five round-1 added review files are byte-unchanged from ea22fc9ce. New strict real-spec type check passes; raw-wire/restart and resumed-screen probes are prepared. Original old-journal R1/R2/R3 test bytes were also loaded against the replacement implementation: R1 cannot import layoutJournalKeys; R2 cannot import layoutJournalKey; R3 cannot import layoutLifetimeKey/storage-journal. These are removed D312 storage APIs, not behavioral passes. Current replacement failure-table coverage will be rerun. The requirement that those obsolete original sources all pass unchanged cannot literally be claimed. Fetched origin/dev is db8c1bdf6, differing from requested browser baseline 2fb412d01 only in DECISIONS.md (D313); production/native build inputs are identical. Comparison builds remain pinned to 2fb412d01. Initial fast attempt failed before tests because shared sccache retained deleted TMPDIR /home/agent/.cache/codex-scratch/l. Private cache socket selected; final run uses a physical 34-byte TMPDIR/state root (one intermediate compilation interrupted before tests to shorten it). No failure waived. No push/deploy/perf-VM runs.
Author
Owner

Delta review r2: exact target 7e2490f075 passed scripts/verify fast (exit 0). Static sizes reproduce the handoff exactly: x86_64 21,434,576 bytes; aarch64 19,610,728 bytes, both stripped static PIE with no interpreter. All Rust rows pass. Tracer group: 407 pass / 0 fail; connections: 105/0; terminal queries: 17/0; protocol: 39/0. Current failure-table replacements are included. Production session/lifetime and engine comparisons now running; no verdict yet.

Verbatim Rust gate output:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Full unmodified gate transcript:
verify-fast-final.log

Delta review r2: exact target 7e2490f075fcbb5fd5e429c87d204d38cf220967 passed `scripts/verify fast` (exit 0). Static sizes reproduce the handoff exactly: x86_64 21,434,576 bytes; aarch64 19,610,728 bytes, both stripped static PIE with no interpreter. All Rust rows pass. Tracer group: 407 pass / 0 fail; connections: 105/0; terminal queries: 17/0; protocol: 39/0. Current failure-table replacements are included. Production session/lifetime and engine comparisons now running; no verdict yet. Verbatim Rust gate output: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` Full unmodified gate transcript: [verify-fast-final.log](https://git.kayg.org/attachments/963f2c8e-52b4-4f9e-9cc9-dcd7e1c1edf0)
Author
Owner

Delta review r2 finding R250-R2-01 — P2 (new): a fenced old screen silently accepts fresh edits.

At server-store.ts:64–69, a changed Welcome clears the old queue and permanently sets #revoked. save() returns silently at line 87, while main.ts:663–675 only checks whether some HTTP session exists and leaves the old screen interactive after same-account replacement.

Production 7e2490f07 reproduction: suspend an original import, sign out and create a new session for the same account, then resume. The old import is safely dropped. Close a window in the resumed screen: visible console windows become 0 while an authenticated server read remains exactly equal to the pre-close canonical layout (one window). Neither login nor the persistent “Not saved — keep this tab open” status appears. The final assertion fails true/false after 5 seconds. This violates D312’s explicit unconfirmed-work indication. End or recreate the editable screen when fencing its lifetime, preserving the drop of old intents.

Failing test committed locally at 2bb788009 on review-layout-per-tab-250-r2. Product code unchanged. Strict real-spec TypeScript check passes. The log’s other failure was a reviewer expectation error: rebinding an old operation ID changes its receipt input and is correctly refused; that control is corrected for a rerun. Restart/pending-edit and two-tab cross-account no-retransmission controls passed.

session-review.log
revoked-screen-after-close.png

Delta review r2 finding R250-R2-01 — P2 (new): a fenced old screen silently accepts fresh edits. At `server-store.ts:64–69`, a changed Welcome clears the old queue and permanently sets `#revoked`. `save()` returns silently at line 87, while `main.ts:663–675` only checks whether some HTTP session exists and leaves the old screen interactive after same-account replacement. Production 7e2490f07 reproduction: suspend an original import, sign out and create a new session for the same account, then resume. The old import is safely dropped. Close a window in the resumed screen: visible console windows become 0 while an authenticated server read remains exactly equal to the pre-close canonical layout (one window). Neither login nor the persistent “Not saved — keep this tab open” status appears. The final assertion fails true/false after 5 seconds. This violates D312’s explicit unconfirmed-work indication. End or recreate the editable screen when fencing its lifetime, preserving the drop of old intents. Failing test committed locally at 2bb788009 on review-layout-per-tab-250-r2. Product code unchanged. Strict real-spec TypeScript check passes. The log’s other failure was a reviewer expectation error: rebinding an old operation ID changes its receipt input and is correctly refused; that control is corrected for a rerun. Restart/pending-edit and two-tab cross-account no-retransmission controls passed. [session-review.log](https://git.kayg.org/attachments/daa286e0-009c-4f28-9eb7-f5b959ac5e65) ![revoked-screen-after-close.png](https://git.kayg.org/attachments/e0199f80-c36a-4751-8f45-90dd4e0b90be)
Author
Owner

Location correction for R250-R2-01 on exact target 7e2490f07: the changed-Welcome block is server-store.ts:59–64, the permanent #revoked assignment is line 62, and the silent save() return is line 82. The main.ts:663–675 reference is unchanged. Evidence and severity remain as reported.

Location correction for R250-R2-01 on exact target 7e2490f07: the changed-Welcome block is server-store.ts:59–64, the permanent #revoked assignment is line 62, and the silent save() return is line 82. The main.ts:663–675 reference is unchanged. Evidence and severity remain as reported.
Author
Owner

Delta review r2 production checks: retained Chromium suite 40 passed / 0 failed / one perf-only skip, with the five round-1 review files unchanged. This includes both suspended-session controls, all-storage/logout checks, both touch controls and both-theme focus/single-activation controls.

Independent raw-wire/restart/two-tab suite: 3/3 pass. Missing, unexpected, empty, null, numeric and stale bindings are refused before existing receipts; caps-0 receives the legacy Welcome and its unbound write is refused. The label never enters URL/localStorage/sessionStorage in the test and is rejected as a cookie. Same-account reauthentication changes it; changing an old receipt's input is correctly refused while a fresh identity succeeds. Server restart retains the label and confirms pending work. With two tabs and a changed account cookie, the old tab sends none of its held operation IDs after the new snapshot.

Native and TypeScript golden vectors pass in the exact-target fast gate. Server admission and client old-intent dropping close R250-02; the separate new P2 editable-lifetime problem remains. Review-only test commit c15d61b0f is local; no product edits/push/deploy. Dev static builds and paired WebKit qualification are running sequentially; no perf-VM runs.

session-wire-final.log
chromium-retained.log

Delta review r2 production checks: retained Chromium suite 40 passed / 0 failed / one perf-only skip, with the five round-1 review files unchanged. This includes both suspended-session controls, all-storage/logout checks, both touch controls and both-theme focus/single-activation controls. Independent raw-wire/restart/two-tab suite: 3/3 pass. Missing, unexpected, empty, null, numeric and stale bindings are refused before existing receipts; caps-0 receives the legacy Welcome and its unbound write is refused. The label never enters URL/localStorage/sessionStorage in the test and is rejected as a cookie. Same-account reauthentication changes it; changing an old receipt's input is correctly refused while a fresh identity succeeds. Server restart retains the label and confirms pending work. With two tabs and a changed account cookie, the old tab sends none of its held operation IDs after the new snapshot. Native and TypeScript golden vectors pass in the exact-target fast gate. Server admission and client old-intent dropping close R250-02; the separate new P2 editable-lifetime problem remains. Review-only test commit c15d61b0f is local; no product edits/push/deploy. Dev static builds and paired WebKit qualification are running sequentially; no perf-VM runs. [session-wire-final.log](https://git.kayg.org/attachments/0bab4cae-230c-4460-968f-93995657a489) [chromium-retained.log](https://git.kayg.org/attachments/eac3107a-04be-4d41-9501-155c17d779ee)
Author
Owner

Delta review r2 pinned static comparison reproduced independently, sequentially in one build slot:

Target dev 2fb412d01 7e2490f07 Delta
x86_64 musl 21,431,472 21,434,576 +3,104 bytes
aarch64 musl 19,605,896 19,610,728 +4,832 bytes

Recipe: scripts/auth-toolchain, then scripts/static-cargo build --locked --release --package infraternal --target <target> for each architecture, same CARGO_TARGET_DIR. Current origin/dev db8c1bdf differs from 2fb412d01 only in DECISIONS.md; native/production inputs match. Both deltas remain below 16 KB.

Linkage detail (correcting my earlier “both static PIE” shorthand): x86 is static PIE; aarch64 is static ELF. Both are stripped and have no PT_INTERP. SHA-256s and file/readelf outcomes are in the attached manifest.

The first external WebKit invocation stopped before tests because package.json module metadata was missing in the scratch harness. The metadata is now copied unchanged and test discovery passes; rerun queued/running, no product result counted from the loader errors.

size-comparison.json
baseline-build.log

Delta review r2 pinned static comparison reproduced independently, sequentially in one build slot: | Target | dev 2fb412d01 | 7e2490f07 | Delta | | --- | ---: | ---: | ---: | | x86_64 musl | 21,431,472 | 21,434,576 | +3,104 bytes | | aarch64 musl | 19,605,896 | 19,610,728 | +4,832 bytes | Recipe: `scripts/auth-toolchain`, then `scripts/static-cargo build --locked --release --package infraternal --target <target>` for each architecture, same CARGO_TARGET_DIR. Current origin/dev db8c1bdf differs from 2fb412d01 only in DECISIONS.md; native/production inputs match. Both deltas remain below 16 KB. Linkage detail (correcting my earlier “both static PIE” shorthand): x86 is static PIE; aarch64 is static ELF. Both are stripped and have no PT_INTERP. SHA-256s and file/readelf outcomes are in the attached manifest. The first external WebKit invocation stopped before tests because package.json module metadata was missing in the scratch harness. The metadata is now copied unchanged and test discovery passes; rerun queued/running, no product result counted from the loader errors. [size-comparison.json](https://git.kayg.org/attachments/c8e805ba-2c5b-44c5-8b57-2acea1046995) [baseline-build.log](https://git.kayg.org/attachments/800725bc-6e4c-4316-ab60-85cea9e0b106)
Author
Owner

Delta review r2 continuation (Claude) on branch review-layout-per-tab-250-r2, base 40ff82cf8 (previous reviewer's WIP), target 7e2490f07. The earlier r2 run stopped at a usage limit. I will re-verify its recorded results (R250-R2-01 P2, the session-binding closure, the static sizes), finish the WebKit touch and broad-WebKit classification against dev 2fb412d01, then run final scripts/verify fast on 7e2490f07. Tests/evidence only: no product edits, no deploy, no perf-VM runs.

Delta review r2 continuation (Claude) on branch review-layout-per-tab-250-r2, base 40ff82cf8 (previous reviewer's WIP), target 7e2490f07. The earlier r2 run stopped at a usage limit. I will re-verify its recorded results (R250-R2-01 P2, the session-binding closure, the static sizes), finish the WebKit touch and broad-WebKit classification against dev 2fb412d01, then run final `scripts/verify fast` on 7e2490f07. Tests/evidence only: no product edits, no deploy, no perf-VM runs.
Author
Owner

Delta review r2: paused for handover (owner request). Review branch review-layout-per-tab-250-r2 pushed at 80c2a3578. No verdict yet; current leaning is "merge after fixes".

Re-verified independently on exact 7e2490f07

  • scripts/verify fast: exit 0. Tracer 407/0, connections 105/0, terminal queries 17/0, protocol 39/0 (stream differential: zero divergences). Rust table, verbatim:
+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
  • Pinned static sizes, built sequentially with the same recipe: x86_64 21,431,472 → 21,434,576 (+3,104 B); aarch64 19,605,896 → 19,610,728 (+4,832 B). Both stripped, no PT_INTERP. They match the handoff exactly.
  • Production Chromium, all real/layout-*.spec.ts: 43 passed, 2 perf-only skipped, 2 failed (both are reviewer P2 tests). The 5 round-1 review files are byte-identical to ea22fc9ce. Earlier review specs changed only in their protocol helper (layout calls are now bound to the Welcome label); their assertions are unchanged.

Round-1 findings

  • P1 R250-02 (session binding): closed. Missing, forged, empty and stale labels are refused before receipt lookup. The label rotates per sign-in and stays stable across a server restart; step-up and unlock do not change it. It is not a credential (401 as a cookie). It is not in storage, the service-worker cache, URLs or logs. Receipts hash it. Older clients get the legacy Welcome and a definitive refusal, with no retry loop. Golden vectors pass in both codecs.
  • P2 R250-01 (coalescing), R250-03 (hint storage) and R250-04 (WebKit touch): closed. Touch passes in WebKit on head; on dev the same specs fail with the original bug.

Active finding

  • R250-R2-01, P2 (new), reproduced again: a fenced store leaves an editable screen that silently drops edits (server-store.ts:59–64, :82; main.ts checkForegroundSession). Failing test: 2bb788009.
  • Under investigation, not yet evidence: the same problem may also be reached by an idle tab whose cookie moved to a second account (sign-in in another tab). On reconnect that tab keeps its screen, shows "Settings · offline" and "The terminal session ended.", and draws the second account's settings window. The edit check is unfinished (WIP 80c2a3578).

Broader WebKit failures (same specs, head vs dev production build): no regression

  • Offline reload: fails identically on both builds (Playwright WebKit page.reload error). Test environment.
  • Failed logout: the held route is never reached while the service worker is active, on both builds; it passes on both with service workers blocked. Test environment.
  • layout-review:127: fails on both builds. Pre-existing on dev.
  • layout-review:354: uses a Chromium-only API. Test environment.
  • layout-review:181: failed once at server startup (load) and passed on rerun. Flake.

Still unchecked: the account-switch scenario above; a review of the perf-VM "terminal stays connecting under real root" report (the delta touches no shim/PTY code; the harness now asserts live earlier; no root here); Hello bit 16 written as a bare literal (P3 candidate).

Counts so far: P0 0, P1 0, P2 1, P3 0.

verify-fast-head.log
chromium-head.log
webkit-head.log
webkit-baseline.log

**Delta review r2: paused for handover (owner request).** Review branch `review-layout-per-tab-250-r2` pushed at 80c2a3578. No verdict yet; current leaning is "merge after fixes". **Re-verified independently on exact 7e2490f07** - `scripts/verify fast`: exit 0. Tracer 407/0, connections 105/0, terminal queries 17/0, protocol 39/0 (stream differential: zero divergences). Rust table, verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` - Pinned static sizes, built sequentially with the same recipe: x86_64 21,431,472 → 21,434,576 (+3,104 B); aarch64 19,605,896 → 19,610,728 (+4,832 B). Both stripped, no PT_INTERP. They match the handoff exactly. - Production Chromium, all `real/layout-*.spec.ts`: 43 passed, 2 perf-only skipped, 2 failed (both are reviewer P2 tests). The 5 round-1 review files are byte-identical to ea22fc9ce. Earlier review specs changed only in their protocol helper (layout calls are now bound to the Welcome label); their assertions are unchanged. **Round-1 findings** - P1 R250-02 (session binding): **closed**. Missing, forged, empty and stale labels are refused before receipt lookup. The label rotates per sign-in and stays stable across a server restart; step-up and unlock do not change it. It is not a credential (401 as a cookie). It is not in storage, the service-worker cache, URLs or logs. Receipts hash it. Older clients get the legacy Welcome and a definitive refusal, with no retry loop. Golden vectors pass in both codecs. - P2 R250-01 (coalescing), R250-03 (hint storage) and R250-04 (WebKit touch): **closed**. Touch passes in WebKit on head; on dev the same specs fail with the original bug. **Active finding** - **R250-R2-01, P2 (new), reproduced again:** a fenced store leaves an editable screen that silently drops edits (`server-store.ts:59–64`, `:82`; `main.ts` checkForegroundSession). Failing test: 2bb788009. - Under investigation, not yet evidence: the same problem may also be reached by an idle tab whose cookie moved to a second account (sign-in in another tab). On reconnect that tab keeps its screen, shows "Settings · offline" and "The terminal session ended.", and draws the second account's settings window. The edit check is unfinished (WIP 80c2a3578). **Broader WebKit failures (same specs, head vs dev production build): no regression** - Offline reload: fails identically on both builds (Playwright WebKit page.reload error). Test environment. - Failed logout: the held route is never reached while the service worker is active, on both builds; it passes on both with service workers blocked. Test environment. - layout-review:127: fails on both builds. Pre-existing on dev. - layout-review:354: uses a Chromium-only API. Test environment. - layout-review:181: failed once at server startup (load) and passed on rerun. Flake. **Still unchecked:** the account-switch scenario above; a review of the perf-VM "terminal stays connecting under real root" report (the delta touches no shim/PTY code; the harness now asserts `live` earlier; no root here); Hello bit 16 written as a bare literal (P3 candidate). Counts so far: P0 0, P1 0, P2 1, P3 0. [verify-fast-head.log](https://git.kayg.org/attachments/9d623df8-c2b5-42cc-b58e-31db1063c873) [chromium-head.log](https://git.kayg.org/attachments/ed8effab-f662-4998-904b-a3199f1d0f46) [webkit-head.log](https://git.kayg.org/attachments/14cc0b52-d89b-4119-ad9e-6f83c91d0e30) [webkit-baseline.log](https://git.kayg.org/attachments/fb6bd95b-65af-40bf-8370-296e3bda7a7e)
Author
Owner

Round-2 review continuation started on review-layout-per-tab-250-r2, base 80c2a3578c62a8ad06b2ae25044f9c190a3474cb, target implementation 7e2490f075fcbb5fd5e429c87d204d38cf220967 (D312). I’m completing phase A (fast gate, production Chromium, production WebKit), then phase B against dev 2fb412d01dcecb81f1f556d18d0350e70644a615 (static comparison and WebKit), and reproducing perf-kit 361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7 under real root on compute01. Review/test evidence only; no implementation edits, deployment, or issue closure.

Round-2 review continuation started on `review-layout-per-tab-250-r2`, base `80c2a3578c62a8ad06b2ae25044f9c190a3474cb`, target implementation `7e2490f075fcbb5fd5e429c87d204d38cf220967` (D312). I’m completing phase A (fast gate, production Chromium, production WebKit), then phase B against dev `2fb412d01dcecb81f1f556d18d0350e70644a615` (static comparison and WebKit), and reproducing perf-kit `361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7` under real root on compute01. Review/test evidence only; no implementation edits, deployment, or issue closure.
Author
Owner

R250-R2-02 — P3: the new layout-session Hello capability is an unnamed literal in the client. The contract defines session incarnation as Hello bit 4 (16) at contracts/wire.md:780, while apps/tracer/src/connection.ts:479 ORs a bare 16n into caps; adjacent capability bits use RESUME_NEXT, LINK_DOUBT_NOTICES and VIEWER_VISIBILITY (:72–76). This is a maintainability finding, not a reported runtime failure. A named capability constant would keep the new handshake bit identifiable at its use site. Target reviewed: 7e2490f075fcbb5fd5e429c87d204d38cf220967.

R250-R2-02 — P3: the new layout-session Hello capability is an unnamed literal in the client. The contract defines session incarnation as Hello bit 4 (`16`) at `contracts/wire.md:780`, while `apps/tracer/src/connection.ts:479` ORs a bare `16n` into `caps`; adjacent capability bits use `RESUME_NEXT`, `LINK_DOUBT_NOTICES` and `VIEWER_VISIBILITY` (`:72–76`). This is a maintainability finding, not a reported runtime failure. A named capability constant would keep the new handshake bit identifiable at its use site. Target reviewed: `7e2490f075fcbb5fd5e429c87d204d38cf220967`.
Author
Owner

Round-2 review is blocked before the required VM checks. From this runner, SSH to both claude@infraternal-dev-01-compute01 and its FQDN returns No route to host; DNS resolves the host to 10.69.69.218, and route lookup selects wt0. I have not run builds, browsers, the gate, or the one authorized real-root perf-kit reproduction, and have not started any VM process. This prevents reading the VM's job rules, completing phase A, phase B, or reproducing kit 361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7. The account-switch probe at WIP head 80c2a3578 remains unexecuted. Please restore the assigned SSH route or provide the approved plain-SSH path; no alternate or linked environment was used.

Round-2 review is blocked before the required VM checks. From this runner, SSH to both `claude@infraternal-dev-01-compute01` and its FQDN returns `No route to host`; DNS resolves the host to `10.69.69.218`, and route lookup selects `wt0`. I have not run builds, browsers, the gate, or the one authorized real-root perf-kit reproduction, and have not started any VM process. This prevents reading the VM's job rules, completing phase A, phase B, or reproducing kit `361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7`. The account-switch probe at WIP head `80c2a3578` remains unexecuted. Please restore the assigned SSH route or provide the approved plain-SSH path; no alternate or linked environment was used.
Author
Owner

Update to the previous blocker note: the owner confirmed compute01 is down and approved dev-02 for the remaining work. I’m continuing phase A/B and the real-root perf-kit reproduction on infraternal-dev-02-std; every heavy command will use ~/infraternal-ops/build-slot with 2 workers (up to 3 where needed). Only the x86 static-size row remains assigned to compute01; I’ll retry its SSH health check every five minutes and report that row pending if the host is still down. No VM checks had run before this update.

Update to the previous blocker note: the owner confirmed compute01 is down and approved dev-02 for the remaining work. I’m continuing phase A/B and the real-root perf-kit reproduction on `infraternal-dev-02-std`; every heavy command will use `~/infraternal-ops/build-slot` with 2 workers (up to 3 where needed). Only the x86 static-size row remains assigned to compute01; I’ll retry its SSH health check every five minutes and report that row pending if the host is still down. No VM checks had run before this update.
Author
Owner

Correction to blocker comments 70821 and 70839: compute01 is back following the owner’s reboot at 22:53 IST. The earlier route blocker is resolved. Phase A/B browser and paired WebKit work stays on dev-02 as approved; the x86_64 static-size row now runs on compute01 through ~/infraternal-ops/build-slot. The real-root perf-kit repro will run on dev-02 as cua with sudo only for that repro, also through build-slot, followed by cleanup.

The first resumed compute01 scripts/verify fast attempt stopped at scripts/verify: line 108: bun: command not found. The launcher used a nested login shell that discarded the Nix dev-shell PATH. The rerun keeps the Nix PATH and is queued in build-slot; no product finding is based on that setup error.

Correction to blocker comments 70821 and 70839: compute01 is back following the owner’s reboot at 22:53 IST. The earlier route blocker is resolved. Phase A/B browser and paired WebKit work stays on dev-02 as approved; the x86_64 static-size row now runs on compute01 through `~/infraternal-ops/build-slot`. The real-root perf-kit repro will run on dev-02 as `cua` with sudo only for that repro, also through build-slot, followed by cleanup. The first resumed compute01 `scripts/verify fast` attempt stopped at `scripts/verify: line 108: bun: command not found`. The launcher used a nested login shell that discarded the Nix dev-shell PATH. The rerun keeps the Nix PATH and is queued in build-slot; no product finding is based on that setup error.
Author
Owner

Round-2 progress: review notes are committed and pushed on review-layout-per-tab-250-r2 at 2f6f9e332; no implementation files changed.

The production head remains at 47 passed / 2 skipped / 2 failed in Chromium; the known P2 is one failure and the account-switch probe has not reached its assertions yet. bun run check passed. The current WebKit/Xvfb attempt fails before assertions with Could not create WPE EGL display: EGL_BAD_PARAMETER.

The approved real-root dev-02 run verified kit 361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7 and initial typing. It did not reproduce a persistent initial “Connecting” state; after server restart it logged two address in use retries and recovered in 1,143.072 ms against 350 ms. The trace points to the perf fixture's parent-only stop/relaunch race. Cleanup verified zero J11 root task processes and restored the host mount.

The corrected account-switch rerun and compute01 x86 static comparison remain queued through build-slot; full-baseline restart-test classification is still pending. I’ll post the final evidence and verdict when those checks finish.

Round-2 progress: review notes are committed and pushed on `review-layout-per-tab-250-r2` at `2f6f9e332`; no implementation files changed. The production head remains at 47 passed / 2 skipped / 2 failed in Chromium; the known P2 is one failure and the account-switch probe has not reached its assertions yet. `bun run check` passed. The current WebKit/Xvfb attempt fails before assertions with `Could not create WPE EGL display: EGL_BAD_PARAMETER`. The approved real-root dev-02 run verified kit `361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7` and initial typing. It did not reproduce a persistent initial “Connecting” state; after server restart it logged two `address in use` retries and recovered in 1,143.072 ms against 350 ms. The trace points to the perf fixture's parent-only stop/relaunch race. Cleanup verified zero J11 root task processes and restored the host mount. The corrected account-switch rerun and compute01 x86 static comparison remain queued through `build-slot`; full-baseline restart-test classification is still pending. I’ll post the final evidence and verdict when those checks finish.
Author
Owner

Round-2 continuation checkpoint on review-layout-per-tab-250-r2, head 1712a54a2 (pushed).

Phase A records remain: exact implementation head 7e2490f07 passed scripts/verify fast; bun run check passed on dev-02. Production Chromium is 47 passed / 2 skipped / 2 failed: the open same-account P2 reproduces, and the corrected cross-account probe timed out before its canonical-state assertions, so it adds no finding. WebKit still fails before app assertions at WPE EGL startup; the paired head/dev classification is in comment 70637.

The five full-iterate restart timeouts pass in the focused restart suite on both target and baseline (18/18 each); full baseline classification remains unrun. The real-root kit reproduction on dev-02 reached initial typing, then reported two address-in-use retries and 1,143.072 ms to typable after restart versus a 350 ms budget. The fixture PID-only stop/relaunch race is recorded in the review notes; task process count was zero after cleanup and the host mount was restored.

The fresh x86_64 baseline/target static comparison is queued through compute01 build-slot; log path: ~/.cache/codex-scratch/j11-layout-250/evidence/x86-static-comparison.log. Next: finish that row, update the review record, then post the final P0–P3 summary and verdict.

Round-2 continuation checkpoint on `review-layout-per-tab-250-r2`, head `1712a54a2` (pushed). Phase A records remain: exact implementation head `7e2490f07` passed `scripts/verify fast`; `bun run check` passed on dev-02. Production Chromium is 47 passed / 2 skipped / 2 failed: the open same-account P2 reproduces, and the corrected cross-account probe timed out before its canonical-state assertions, so it adds no finding. WebKit still fails before app assertions at WPE EGL startup; the paired head/dev classification is in comment 70637. The five full-iterate restart timeouts pass in the focused restart suite on both target and baseline (18/18 each); full baseline classification remains unrun. The real-root kit reproduction on dev-02 reached initial typing, then reported two address-in-use retries and 1,143.072 ms to typable after restart versus a 350 ms budget. The fixture PID-only stop/relaunch race is recorded in the review notes; task process count was zero after cleanup and the host mount was restored. The fresh x86_64 baseline/target static comparison is queued through compute01 `build-slot`; log path: `~/.cache/codex-scratch/j11-layout-250/evidence/x86-static-comparison.log`. Next: finish that row, update the review record, then post the final P0–P3 summary and verdict.
Author
Owner

Review-branch correction: review-layout-per-tab-250-r2 is now at 8bf774543 (pushed). I removed the inconclusive account-switch spec after its production run timed out before the canonical-state assertions; the screenshot/log and limitation remain in the notes, and the complete same-account P2 test remains. No implementation files changed. The fresh compute01 x86 static comparison is still queued through build-slot; the existing target artifact is 21,434,576 bytes and matches the exact cap.

Review-branch correction: `review-layout-per-tab-250-r2` is now at `8bf774543` (pushed). I removed the inconclusive account-switch spec after its production run timed out before the canonical-state assertions; the screenshot/log and limitation remain in the notes, and the complete same-account P2 test remains. No implementation files changed. The fresh compute01 x86 static comparison is still queued through `build-slot`; the existing target artifact is 21,434,576 bytes and matches the exact cap.
Author
Owner

Round-2 review complete for D312 / #250. Implementation target: layout-per-tab-250 at 7e2490f075fcbb5fd5e429c87d204d38cf220967. Review notes are pushed on review-layout-per-tab-250-r2 at f059476bd2fa8f6a87e918750c2a0b253168a7d3; no implementation files were changed. The issue remains open.

Findings

  • P0: none.
  • P1: none. Round-one session-binding finding R250-02 is closed.
  • P2 R250-R2-01: open. A revoked ServerCanvasStore leaves its old screen editable; save() silently drops the edit, the authenticated canonical layout stays unchanged, and the screen does not show D312’s “Not saved” state. This reproduces in the production Chromium test; screenshot and log are attached in comment #70585.
  • P3 R250-R2-02: open. apps/tracer/src/connection.ts:479 advertises the Hello capability with bare 16n, while adjacent bits are named constants. The contract identifies this as Hello bit 4; this is a maintainability finding, with no runtime failure claimed. Evidence is in comment #70820.

Phase A — implementation head

The exact-target scripts/verify fast run recorded in comment #70582 passed at 7e2490f07; bun run check passed. The gate also reported tracer 407/0, connections 105/0, terminal queries 17/0, protocol 39/0, and zero stream differential divergences. Its Rust gate table is reproduced verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

Production Chromium: 47 passed, 2 skipped, 2 failed. One failure is R250-R2-01. The second-account probe timed out before post-edit canonical-state assertions, so it is inconclusive and is not a separate finding; its exploratory spec was removed from the review branch. Production WebKit on the target fails before app assertions at WPE EGL startup (Could not create WPE EGL display: EGL_BAD_PARAMETER). The paired head/dev WebKit classification in comment #70637 reports the same broad failures on both builds.

scripts/verify iterate on dev-02 reported 98 passed, 5 failed, 1 ignored. The five restart-control timeout tests pass in focused restart::tests on both target and baseline (18/18 each); the full baseline suite was not rerun, so those full-gate timeouts remain unclassified.

Phase B — baseline 2fb412d01

Pinned static comparison:

Target Baseline Implementation Delta
x86_64 musl 21,431,472 21,434,576 +3,104 bytes
aarch64 musl 19,605,896 19,610,728 +4,832 bytes

Both deltas are below 16 KiB and both images match the exact ceilings. The fresh x86 static row ran on compute01 through ~/infraternal-ops/build-slot against the exact implementation SHA: production trust PASS; stripped static PIE; no PT_INTERP; 21,434,576 bytes against a 21,434,576-byte cap (delta +0); SHA-256 d7c66be3346ab16b4e110038c7c9c78718bf0a9f78cee5a204e38a0eea5e6e4b.

Real-root perf-kit reproduction

Kit 361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7 ran as real root on dev-02 through build-slot. It reached initial typing; a persistent initial “Connecting” state was not reproduced. After server restart it logged two address in use retries and took 1,143.072 ms to become typable against a 350 ms budget. The evidence points to a fixture teardown race: apps/tracer/real/server.ts:181–189 SIGTERMs and waits for only the detached server PID, then relaunches before the old process group and embedded agent exit; later cleanup kills the process group. The retries align with that race. This does not confirm a product hang; these lifecycle lines are unchanged from baseline. Cleanup recorded zero J11 task processes and restored the host mount; root-owned fixture cache files were removed.

Both J11 build targets have been removed from compute01 and dev-02. The review worktree is clean at the pushed head above.

Verdict: Request changes.

Round-2 review complete for D312 / #250. Implementation target: `layout-per-tab-250` at `7e2490f075fcbb5fd5e429c87d204d38cf220967`. Review notes are pushed on `review-layout-per-tab-250-r2` at `f059476bd2fa8f6a87e918750c2a0b253168a7d3`; no implementation files were changed. The issue remains open. **Findings** - **P0: none.** - **P1: none.** Round-one session-binding finding R250-02 is closed. - **P2 R250-R2-01: open.** A revoked `ServerCanvasStore` leaves its old screen editable; `save()` silently drops the edit, the authenticated canonical layout stays unchanged, and the screen does not show D312’s “Not saved” state. This reproduces in the production Chromium test; screenshot and log are attached in comment #70585. - **P3 R250-R2-02: open.** `apps/tracer/src/connection.ts:479` advertises the Hello capability with bare `16n`, while adjacent bits are named constants. The contract identifies this as Hello bit 4; this is a maintainability finding, with no runtime failure claimed. Evidence is in comment #70820. **Phase A — implementation head** The exact-target `scripts/verify fast` run recorded in comment #70582 passed at `7e2490f07`; `bun run check` passed. The gate also reported tracer 407/0, connections 105/0, terminal queries 17/0, protocol 39/0, and zero stream differential divergences. Its Rust gate table is reproduced verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ``` Production Chromium: 47 passed, 2 skipped, 2 failed. One failure is R250-R2-01. The second-account probe timed out before post-edit canonical-state assertions, so it is inconclusive and is not a separate finding; its exploratory spec was removed from the review branch. Production WebKit on the target fails before app assertions at WPE EGL startup (`Could not create WPE EGL display: EGL_BAD_PARAMETER`). The paired head/dev WebKit classification in comment #70637 reports the same broad failures on both builds. `scripts/verify iterate` on dev-02 reported 98 passed, 5 failed, 1 ignored. The five restart-control timeout tests pass in focused `restart::tests` on both target and baseline (18/18 each); the full baseline suite was not rerun, so those full-gate timeouts remain unclassified. **Phase B — baseline `2fb412d01`** Pinned static comparison: | Target | Baseline | Implementation | Delta | | --- | ---: | ---: | ---: | | x86_64 musl | 21,431,472 | 21,434,576 | +3,104 bytes | | aarch64 musl | 19,605,896 | 19,610,728 | +4,832 bytes | Both deltas are below 16 KiB and both images match the exact ceilings. The fresh x86 static row ran on compute01 through `~/infraternal-ops/build-slot` against the exact implementation SHA: production trust PASS; stripped static PIE; no `PT_INTERP`; 21,434,576 bytes against a 21,434,576-byte cap (delta +0); SHA-256 `d7c66be3346ab16b4e110038c7c9c78718bf0a9f78cee5a204e38a0eea5e6e4b`. **Real-root perf-kit reproduction** Kit `361fac6387717187b439ba9bcbfadc7f1a87e9bc8965326e47de859ca28a03e7` ran as real root on dev-02 through `build-slot`. It reached initial typing; a persistent initial “Connecting” state was not reproduced. After server restart it logged two `address in use` retries and took 1,143.072 ms to become typable against a 350 ms budget. The evidence points to a fixture teardown race: `apps/tracer/real/server.ts:181–189` SIGTERMs and waits for only the detached server PID, then relaunches before the old process group and embedded agent exit; later cleanup kills the process group. The retries align with that race. This does not confirm a product hang; these lifecycle lines are unchanged from baseline. Cleanup recorded zero J11 task processes and restored the host mount; root-owned fixture cache files were removed. Both J11 build targets have been removed from compute01 and dev-02. The review worktree is clean at the pushed head above. **Verdict: Request changes.**
Author
Owner

Starting J32 fix round 3 on layout-per-tab-250, base origin/dev 57491e918. I’m reading D312 and the round-2 findings, then I’ll add failing-first regressions, fix the revoked-store UI state, capability name, restart fixture teardown, and account-switch probe. Verification and browser work will run through compute01 build-slot; no product edits yet.

Starting J32 fix round 3 on `layout-per-tab-250`, base `origin/dev` `57491e918`. I’m reading D312 and the round-2 findings, then I’ll add failing-first regressions, fix the revoked-store UI state, capability name, restart fixture teardown, and account-switch probe. Verification and browser work will run through compute01 `build-slot`; no product edits yet.
Author
Owner

J32 contract note (D312, R250-R2-01): D312 says a changed session incarnation drops queued edits without sending and reports lost edits with the existing Not saved state, but it does not define what to do with the old canvas after access changes or what to show when no edit was waiting. This round uses the conservative behavior: dispose the old canvas on any incarnation change and return to passkey sign-in. When unconfirmed edits were present, the sign-in screen will say “Not saved. Changes waiting to save were lost. Sign in again to continue.” An account change with no pending edit will say “Your sign-in changed. Sign in again to continue.” This prevents silently discarded edits and keeps the replacement account's layout out of the old screen. Please clarify revocation behavior in D312.

J32 contract note (D312, R250-R2-01): D312 says a changed session incarnation drops queued edits without sending and reports lost edits with the existing Not saved state, but it does not define what to do with the old canvas after access changes or what to show when no edit was waiting. This round uses the conservative behavior: dispose the old canvas on any incarnation change and return to passkey sign-in. When unconfirmed edits were present, the sign-in screen will say “Not saved. Changes waiting to save were lost. Sign in again to continue.” An account change with no pending edit will say “Your sign-in changed. Sign in again to continue.” This prevents silently discarded edits and keeps the replacement account's layout out of the old screen. Please clarify revocation behavior in D312.
Author
Owner

J32 RED progress on layout-per-tab-250 at c7a9450af (rebased from origin/dev 57491e918):

  • R250-R2-01: the failing-first store tests now reproduce that replacement and previously unbound sessions drop queued edits without notifying the screen; the new no-pending control also shows that an incarnation change currently leaves the canvas alive. The original-incarnation reconnect control passes.
  • R250-R2-02: the contract test fails because the named layout-session capability is not exported yet.
  • The account-switch browser probe now waits for the replacement Welcome and performs both authenticated canonical-layout reads before its final screen assertion. It no longer freezes that page, avoiding the previous close-context timeout.
  • The real-server process-group regression and both P2 production-browser tests are staged in the worktree. The baseline production build is queued on compute01 through build-slot; log: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/baseline-build.log.

Next: run the deterministic RED browser checks, implement each finding, then run Chromium/WebKit attempts and scripts/verify fast.

J32 RED progress on layout-per-tab-250 at c7a9450af (rebased from origin/dev 57491e918): - R250-R2-01: the failing-first store tests now reproduce that replacement and previously unbound sessions drop queued edits without notifying the screen; the new no-pending control also shows that an incarnation change currently leaves the canvas alive. The original-incarnation reconnect control passes. - R250-R2-02: the contract test fails because the named layout-session capability is not exported yet. - The account-switch browser probe now waits for the replacement Welcome and performs both authenticated canonical-layout reads before its final screen assertion. It no longer freezes that page, avoiding the previous close-context timeout. - The real-server process-group regression and both P2 production-browser tests are staged in the worktree. The baseline production build is queued on compute01 through build-slot; log: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/baseline-build.log. Next: run the deterministic RED browser checks, implement each finding, then run Chromium/WebKit attempts and scripts/verify fast.
Author
Owner

Crash-safety checkpoint for J32: WIP regression commits 900c3c7d8, 9752ecc8a and 06ff2c003 are pushed on layout-per-tab-250. They cover the revoked-session store/screen, the D312 Hello capability contract, and deterministic process-group restart teardown; baseline failures have been observed for the store callback and the missing capability name. The account-switch spec now reaches both canonical reads before its final UI assertion. Production fixes remain local until the baseline real-server/browser run is captured. compute01 baseline build log: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/baseline-build.log.

Crash-safety checkpoint for J32: WIP regression commits 900c3c7d8, 9752ecc8a and 06ff2c003 are pushed on layout-per-tab-250. They cover the revoked-session store/screen, the D312 Hello capability contract, and deterministic process-group restart teardown; baseline failures have been observed for the store callback and the missing capability name. The account-switch spec now reaches both canonical reads before its final UI assertion. Production fixes remain local until the baseline real-server/browser run is captured. compute01 baseline build log: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/baseline-build.log.
Author
Owner

J32 progress on layout-per-tab-250: the focused baseline unit regressions are red as expected: replacement and unbound sessions miss the lost-edit callback, a changed lifetime adopts the replacement snapshot, and the D312 capability test cannot import its named constant. Evidence: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. The deterministic real-server process-group RED test is queued through compute01 build-slot; all four slots remain occupied, so I have not changed the fixture before observing its baseline result. Next: capture that failure, then fix and run production Chromium plus the fast gate.

J32 progress on layout-per-tab-250: the focused baseline unit regressions are red as expected: replacement and unbound sessions miss the lost-edit callback, a changed lifetime adopts the replacement snapshot, and the D312 capability test cannot import its named constant. Evidence: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. The deterministic real-server process-group RED test is queued through compute01 build-slot; all four slots remain occupied, so I have not changed the fixture before observing its baseline result. Next: capture that failure, then fix and run production Chromium plus the fast gate.
Author
Owner

J32 crash-safety checkpoint: WIP source snapshot 390583d3a is pushed on layout-per-tab-250. It ends the old canvas on session-incarnation change with a plain sign-in/lost-edit message and names the D312 Hello bit 4 capability. Fresh baseline unit RED evidence is in ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. The deterministic process-group and production Chromium RED commands remain queued through compute01 build-slot; neither has started. Next: capture both baseline failures, fix and verify the fixture, build the production tracer, then run Chromium/WebKit and scripts/verify fast. The WIP will be split into atomic passing commits before handoff.

J32 crash-safety checkpoint: WIP source snapshot 390583d3a is pushed on layout-per-tab-250. It ends the old canvas on session-incarnation change with a plain sign-in/lost-edit message and names the D312 Hello bit 4 capability. Fresh baseline unit RED evidence is in ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. The deterministic process-group and production Chromium RED commands remain queued through compute01 build-slot; neither has started. Next: capture both baseline failures, fix and verify the fixture, build the production tracer, then run Chromium/WebKit and scripts/verify fast. The WIP will be split into atomic passing commits before handoff.
Author
Owner

J32 queue update at pushed WIP head 390583d3a: the deterministic process-group RED command has waited more than 30 minutes in compute01 build-slot; the production Chromium RED command is queued behind it. The host still has four active build/browser slots in use. No test result is claimed for either command. The baseline unit RED output remains at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log; I will continue with the assigned VM and report the test evidence when it starts.

J32 queue update at pushed WIP head 390583d3a: the deterministic process-group RED command has waited more than 30 minutes in compute01 build-slot; the production Chromium RED command is queued behind it. The host still has four active build/browser slots in use. No test result is claimed for either command. The baseline unit RED output remains at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log; I will continue with the assigned VM and report the test evidence when it starts.
Author
Owner

J32 queue update at WIP head 390583d3a: the process-group RED command has waited over one hour on compute01; the Chromium boundary RED command has waited about 48 minutes. All four build-slot lock files still have live owners. Neither command has started, and no result is claimed. Unit RED evidence remains available at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. I will continue once the assigned VM releases a slot.

J32 queue update at WIP head 390583d3a: the process-group RED command has waited over one hour on compute01; the Chromium boundary RED command has waited about 48 minutes. All four build-slot lock files still have live owners. Neither command has started, and no result is claimed. Unit RED evidence remains available at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log. I will continue once the assigned VM releases a slot.
Author
Owner

J32 adjustment: after more than one hour without a compute01 slot, I canceled the queued process-only run and moved that architecture-neutral fixture check to dev-02's native ARM64 build through its build-slot. It does not request a browser fixture. The production Chromium suite and remain assigned to compute01. The dev-02 build log will be under ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/dev02-baseline-build.log.

J32 adjustment: after more than one hour without a compute01 slot, I canceled the queued process-only run and moved that architecture-neutral fixture check to dev-02's native ARM64 build through its build-slot. It does not request a browser fixture. The production Chromium suite and remain assigned to compute01. The dev-02 build log will be under ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/dev02-baseline-build.log.
Author
Owner

Correction to the previous J32 adjustment note: the fixture-only spec is apps/tracer/real/server-process-group.spec.ts. Its queued compute01 run has been canceled, and the same baseline spec is now building and will run on dev-02 through build-slot with a native ARM64 server. This test does not launch Chromium. The production Chromium suite and scripts/verify fast remain assigned to compute01. No test result is claimed yet.

Correction to the previous J32 adjustment note: the fixture-only spec is apps/tracer/real/server-process-group.spec.ts. Its queued compute01 run has been canceled, and the same baseline spec is now building and will run on dev-02 through build-slot with a native ARM64 server. This test does not launch Chromium. The production Chromium suite and scripts/verify fast remain assigned to compute01. No test result is claimed yet.
Author
Owner

Dev-02 build status: the first nix develop attempt failed before compilation because its working directory was outside the checkout's flake; no test ran and no binary was produced. The retry now starts from the J32 worktree root and is compiling the native ARM64 infraternal binary before building the tracer bundle. Evidence: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/dev02-baseline-build-r2.log.

Dev-02 build status: the first nix develop attempt failed before compilation because its working directory was outside the checkout's flake; no test ran and no binary was produced. The retry now starts from the J32 worktree root and is compiling the native ARM64 infraternal binary before building the tracer bundle. Evidence: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/dev02-baseline-build-r2.log.
Author
Owner

Dev-02 fixture-test update: the native ARM64 binary and tracer bundle built successfully. The target directory was removed after copying the binary to external evidence, but free disk is now 11 GB, below build-slot's 25 GB minimum, so no test ran there. The process-group RED spec is queued again on compute01 using its existing production binary. The only browser suite and fast gate remain on compute01. The native binary receipt is in ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/infraternal-arm64-baseline (SHA-256 7468e0d9c3714d501804f8985e9c75cf0444e17188505a21880bedfc67cae50b).

Dev-02 fixture-test update: the native ARM64 binary and tracer bundle built successfully. The target directory was removed after copying the binary to external evidence, but free disk is now 11 GB, below build-slot's 25 GB minimum, so no test ran there. The process-group RED spec is queued again on compute01 using its existing production binary. The only browser suite and fast gate remain on compute01. The native binary receipt is in ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/infraternal-arm64-baseline (SHA-256 7468e0d9c3714d501804f8985e9c75cf0444e17188505a21880bedfc67cae50b).
Author
Owner

J32 progress at af7019c56275 on layout-per-tab-250:

  • Captured baseline unit RED evidence for the revoked-store callback and missing D312 capability name at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log.
  • Updated the existing suspended-session integration spec to require sign-in with the lost-edit message and to verify the replacement layout remains canonical.
  • The deterministic process-group RED and production boundary RED commands are still waiting in compute01 build-slot; neither has started, so no result is claimed.

Next: capture those baseline results, then finish and verify the fixture teardown and browser probes. Queue logs remain under ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/ on compute01.

J32 progress at `af7019c56275` on `layout-per-tab-250`: - Captured baseline unit RED evidence for the revoked-store callback and missing D312 capability name at `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red.log`. - Updated the existing suspended-session integration spec to require sign-in with the lost-edit message and to verify the replacement layout remains canonical. - The deterministic process-group RED and production boundary RED commands are still waiting in compute01 `build-slot`; neither has started, so no result is claimed. Next: capture those baseline results, then finish and verify the fixture teardown and browser probes. Queue logs remain under `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/` on compute01.
Author
Owner

J32 fix-round continuation on layout-per-tab-250 at fa60db2ce, based on 57491e918.

D312 says authenticated peers stop on revocation and unconfirmed edits may be lost, but it does not specify the old screen after access is revoked. I’m following the conservative behavior: freeze/end that screen and show “Not saved. Changes waiting to save were lost. Sign in again to continue.” for pending edits. This is the decision for kayg to review.

The P2/P3 regression commits and UI behavior are in progress; real-server account-switch coverage reads both accounts’ canonical layouts before its final screen assertions.

The first process-group RED attempt did not reach the restart assertion: the test used the unset default INFRATERNAL_BIN path target/x86_64-unknown-linux-musl/release/infraternal, while this compute01 baseline build is at target/release/infraternal. It left no matching fixture processes. I stopped the queued run and am relaunching with the explicit baseline binary and a persistent evidence log through build-slot.

J32 fix-round continuation on layout-per-tab-250 at fa60db2ce, based on 57491e918. D312 says authenticated peers stop on revocation and unconfirmed edits may be lost, but it does not specify the old screen after access is revoked. I’m following the conservative behavior: freeze/end that screen and show “Not saved. Changes waiting to save were lost. Sign in again to continue.” for pending edits. This is the decision for kayg to review. The P2/P3 regression commits and UI behavior are in progress; real-server account-switch coverage reads both accounts’ canonical layouts before its final screen assertions. The first process-group RED attempt did not reach the restart assertion: the test used the unset default INFRATERNAL_BIN path target/x86_64-unknown-linux-musl/release/infraternal, while this compute01 baseline build is at target/release/infraternal. It left no matching fixture processes. I stopped the queued run and am relaunching with the explicit baseline binary and a persistent evidence log through build-slot.
Author
Owner

J32 fixture-fix checkpoint on layout-per-tab-250 @ c54baae52, based on 57491e918.

The local WIP fix now signals the detached server-owned process group and waits up to 5 seconds for exit before relaunch; if the group remains, it sends SIGKILL and waits one more second before refusing to relaunch. Disposal uses the same bounded teardown. Session shims stay isolated in their own groups.

The corrected baseline real-server regression is still waiting in compute01's build-slot queue. Its evidence log is /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun.log; it uses the existing target/release/infraternal binary and TRACER_TEST_PORT=47822. The earlier real-root kit result (two address-in-use retries, 1,143.072 ms against 350 ms) is the current failing evidence. Next: capture the deterministic RED result, verify the fixture fix, run production Chromium/WebKit attempts, the real-root measurement and scripts/verify fast.

J32 fixture-fix checkpoint on `layout-per-tab-250` @ `c54baae52`, based on `57491e918`. The local WIP fix now signals the detached server-owned process group and waits up to 5 seconds for exit before relaunch; if the group remains, it sends SIGKILL and waits one more second before refusing to relaunch. Disposal uses the same bounded teardown. Session shims stay isolated in their own groups. The corrected baseline real-server regression is still waiting in compute01's build-slot queue. Its evidence log is `/home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun.log`; it uses the existing `target/release/infraternal` binary and `TRACER_TEST_PORT=47822`. The earlier real-root kit result (two address-in-use retries, 1,143.072 ms against 350 ms) is the current failing evidence. Next: capture the deterministic RED result, verify the fixture fix, run production Chromium/WebKit attempts, the real-root measurement and `scripts/verify fast`.
Author
Owner

J32 fixture checkpoint on layout-per-tab-250 @ 5be962e76, based on 57491e918.

The deterministic baseline regression now asserts the old detached group is gone before relaunch, and its delayed child is spawned only for the server launch (the fixture also invokes the binary for setup). The process-group teardown fix is pushed as WIP. The previously observed real-root result remains two address-in-use retries and 1,143.072 ms against a 350 ms budget.

The corrected RED run has waited since 00:12 UTC in compute01 build-slot, still at queue position 11 with all four slots occupied. It has not started, so there is no regression-test result yet. Its log is /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun.log. I’m keeping it against the unmodified fixture until a slot opens; then I’ll sync the pushed branch and run the GREEN checks.

J32 fixture checkpoint on `layout-per-tab-250` @ `5be962e76`, based on `57491e918`. The deterministic baseline regression now asserts the old detached group is gone before relaunch, and its delayed child is spawned only for the server launch (the fixture also invokes the binary for setup). The process-group teardown fix is pushed as WIP. The previously observed real-root result remains two address-in-use retries and 1,143.072 ms against a 350 ms budget. The corrected RED run has waited since 00:12 UTC in compute01 `build-slot`, still at queue position 11 with all four slots occupied. It has not started, so there is no regression-test result yet. Its log is `/home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun.log`. I’m keeping it against the unmodified fixture until a slot opens; then I’ll sync the pushed branch and run the GREEN checks.
Author
Owner

Correction to the queue note above: I cancelled the first corrected-baseline launch before it acquired a slot. It used Playwright's default config from the repository root; the real-server regression must run from apps/tracer with playwright.real.config.ts so no proxy occupies its server port. The valid baseline run is now queued on compute01 at position 11; log: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun2.log. The fixture source remains unchanged on that VM.

Correction to the queue note above: I cancelled the first corrected-baseline launch before it acquired a slot. It used Playwright's default config from the repository root; the real-server regression must run from `apps/tracer` with `playwright.real.config.ts` so no proxy occupies its server port. The valid baseline run is now queued on compute01 at position 11; log: `/home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-rerun2.log`. The fixture source remains unchanged on that VM.
Author
Owner

J32 fixture regression evidence on layout-per-tab-250 @ 23031d8d9. The first queued compute01 attempt was canceled before execution because its environment variable was misspelled. The corrected deterministic test ran on dev-02 ARM64 against baseline binary SHA-256 7468e0d9c3714d501804f8985e9c75cf0444e17188505a21880bedfc67cae50b and the pre-fix fixture at 390583d3a6: RED as expected, failing because the old process group still existed when restart attempted the replacement. After copying the fixture fix (server.ts SHA-256 f55bb32f877ac6ce51c459b3507d05d9196d86b9a7a6fa2b2eca8120a6f0a68e), the same test passed 1/1 in 6.6 s. Test source SHA-256 2340004ba1ef40541fae3e8862c10b40344343bb55079ed14f6aca7d670ee3a6. Logs: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-arm64-baseline.log and process-group-green-arm64.log on dev-02. Next: compute01 Chromium and fast gate, then rerun the real-root restart measurement.

J32 fixture regression evidence on layout-per-tab-250 @ 23031d8d9. The first queued compute01 attempt was canceled before execution because its environment variable was misspelled. The corrected deterministic test ran on dev-02 ARM64 against baseline binary SHA-256 7468e0d9c3714d501804f8985e9c75cf0444e17188505a21880bedfc67cae50b and the pre-fix fixture at 390583d3a69a74437a341b1016ea2323f18617b0: RED as expected, failing because the old process group still existed when restart attempted the replacement. After copying the fixture fix (server.ts SHA-256 f55bb32f877ac6ce51c459b3507d05d9196d86b9a7a6fa2b2eca8120a6f0a68e), the same test passed 1/1 in 6.6 s. Test source SHA-256 2340004ba1ef40541fae3e8862c10b40344343bb55079ed14f6aca7d670ee3a6. Logs: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/process-group-red-arm64-baseline.log and process-group-green-arm64.log on dev-02. Next: compute01 Chromium and fast gate, then rerun the real-root restart measurement.
Author
Owner

R250-R2-01 unit RED/GREEN update on layout-per-tab-250 @ 23031d8d9. The revoked store deliberately clears its in-memory canonical document before ending the old screen, so the regression now asserts an empty document after revocation instead of preserving the old snapshot. Against the pre-fix server-store at c7a9450af, the corrected test is RED: original-lifetime reconnect passes, while replacement/unbound sessions do not report the loss and the no-pending case adopts the replacement snapshot (1 pass, 4 fail, 15 assertions). With the fix, the focused unit set is GREEN: 6 pass, 0 fail, 21 assertions, including the named bit-4 capability test. Evidence logs on dev-02: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red-adjusted.log and unit-green.log. The production Chromium same-account and account-switch checks are queued after the compute01 fast build.

R250-R2-01 unit RED/GREEN update on layout-per-tab-250 @ 23031d8d9. The revoked store deliberately clears its in-memory canonical document before ending the old screen, so the regression now asserts an empty document after revocation instead of preserving the old snapshot. Against the pre-fix server-store at c7a9450af, the corrected test is RED: original-lifetime reconnect passes, while replacement/unbound sessions do not report the loss and the no-pending case adopts the replacement snapshot (1 pass, 4 fail, 15 assertions). With the fix, the focused unit set is GREEN: 6 pass, 0 fail, 21 assertions, including the named bit-4 capability test. Evidence logs on dev-02: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-red-adjusted.log and unit-green.log. The production Chromium same-account and account-switch checks are queued after the compute01 fast build.
Author
Owner

R250-R2-01 test refinement on layout-per-tab-250 @ d951dc19a: the revocation unit control now also attempts a save after the session boundary and verifies the cleared store stays empty with no pending work or server calls. Against the pre-fix server-store at c7a9450af, the revised suite is RED (1 pass, 4 fail, 15 assertions). With the current store and named capability, it is GREEN (6 pass, 0 fail, 26 assertions). Logs on dev-02: unit-red-revoked-save.log and unit-green-revoked-save.log. This supplements the production same-account and account-switch browser checks still pending on compute01.

R250-R2-01 test refinement on layout-per-tab-250 @ d951dc19a: the revocation unit control now also attempts a save after the session boundary and verifies the cleared store stays empty with no pending work or server calls. Against the pre-fix server-store at c7a9450af, the revised suite is RED (1 pass, 4 fail, 15 assertions). With the current store and named capability, it is GREEN (6 pass, 0 fail, 26 assertions). Logs on dev-02: unit-red-revoked-save.log and unit-green-revoked-save.log. This supplements the production same-account and account-switch browser checks still pending on compute01.
Author
Owner

J32 fix-round 3 continuation on layout-per-tab-250 @ d951dc19a, based on the requested origin/dev 57491e918. The worktree is clean. The queued duplicate canvas-unit command was stopped before it acquired a build slot; the current scripts/verify fast run remains active on compute01 through build-slot, with output at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log.

Failing-first evidence already recorded: revoked-store/capability RED→GREEN in unit-red-revoked-save.log / unit-green-revoked-save.log; deterministic fixture process-group RED→GREEN on dev-02 in process-group-red-arm64-baseline.log / process-group-green-arm64.log. Current code ends the old screen after incarnation change and names the Hello capability. Production Chromium/account-switch verification, the WebKit Nix/software-GL attempt, and final atomic commit split remain next; no new pass is claimed here.

J32 fix-round 3 continuation on `layout-per-tab-250` @ `d951dc19a`, based on the requested `origin/dev` `57491e918`. The worktree is clean. The queued duplicate canvas-unit command was stopped before it acquired a build slot; the current `scripts/verify fast` run remains active on compute01 through build-slot, with output at `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log`. Failing-first evidence already recorded: revoked-store/capability RED→GREEN in `unit-red-revoked-save.log` / `unit-green-revoked-save.log`; deterministic fixture process-group RED→GREEN on dev-02 in `process-group-red-arm64-baseline.log` / `process-group-green-arm64.log`. Current code ends the old screen after incarnation change and names the Hello capability. Production Chromium/account-switch verification, the WebKit Nix/software-GL attempt, and final atomic commit split remain next; no new pass is claimed here.
Author
Owner

J32 continuation at d951dc19a on layout-per-tab-250, based on 57491e918. The assigned compute01 fast gate is still active through build-slot and is compiling the production Rust dependency graph; current log is /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log. The source-level RED/GREEN evidence and fixture regression remain recorded above. Next: exact-head fast completion, production Chromium, conclusive account-switch assertions, WebKit startup attempt, then final commit split and push.

J32 continuation at d951dc19a on layout-per-tab-250, based on 57491e918. The assigned compute01 fast gate is still active through build-slot and is compiling the production Rust dependency graph; current log is /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log. The source-level RED/GREEN evidence and fixture regression remain recorded above. Next: exact-head fast completion, production Chromium, conclusive account-switch assertions, WebKit startup attempt, then final commit split and push.
Author
Owner

J32 gate finding: the first exact-head scripts/verify fast run exited 1 at the replay_size_review test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry. The panic is test-fixture path validation before binary behavior: agent_fixture.py reports its AF_UNIX socket path is 109 bytes after fallback. Both scripts/agent_fixture.py and replay_size_review.rs have identical Git blobs on requested baseline 57491e918 and d951dc19a. The fixture supports INFRATERAL_AGENT_TEST_STATE_ROOT; I will rerun fast with a short private root and retain the first transcript for classification. Current transcript: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log. Chromium remains queued behind compute01 build-slot.

J32 gate finding: the first exact-head scripts/verify fast run exited 1 at the replay_size_review test adopted_raw_and_snapshot_replays_keep_pre_resize_geometry. The panic is test-fixture path validation before binary behavior: agent_fixture.py reports its AF_UNIX socket path is 109 bytes after fallback. Both scripts/agent_fixture.py and replay_size_review.rs have identical Git blobs on requested baseline 57491e918 and d951dc19a. The fixture supports INFRATERAL_AGENT_TEST_STATE_ROOT; I will rerun fast with a short private root and retain the first transcript for classification. Current transcript: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast.log. Chromium remains queued behind compute01 build-slot.
Author
Owner

Correction to the gate classification note: the override is spelled INFRATERNAL_AGENT_TEST_STATE_ROOT (with the n after r). I also loaded the baseline 57491e918 version of agent_fixture.py and reproduced the same 109-byte AF_UNIX path ValueError before binary startup, confirming this failure on the requested base.

Correction to the gate classification note: the override is spelled INFRATERNAL_AGENT_TEST_STATE_ROOT (with the n after r). I also loaded the baseline 57491e918 version of agent_fixture.py and reproduced the same 109-byte AF_UNIX path ValueError before binary startup, confirming this failure on the requested base.
Author
Owner

J32 progress at d951dc19a on layout-per-tab-250, based on the requested 57491e918:

  • The first exact-head scripts/verify fast run exited 1 at adopted_raw_and_snapshot_replays_keep_pre_resize_geometry, before binary behavior: the shared fixture produced a 109-byte AF_UNIX socket path. The same failure reproduces on 57491e918, with identical fixture/test blobs. The retry will set INFRATERNAL_AGENT_TEST_STATE_ROOT=/tmp/j32 inside the Nix shell.
  • The production Chromium boundary/incarnation/process-group suite and the Nix WebKit software-GL attempt are queued through compute01 build-slot at positions 3 and 6. Neither has started assertions or produced WebKit startup evidence yet. Logs: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/chromium.log and webkit-nix.log.

I will run the corrected full gate after the browser work to avoid rebuilding its target concurrently, then post the exact results and split the WIP tail into three atomic commits.

J32 progress at `d951dc19a` on `layout-per-tab-250`, based on the requested `57491e918`: - The first exact-head `scripts/verify fast` run exited 1 at `adopted_raw_and_snapshot_replays_keep_pre_resize_geometry`, before binary behavior: the shared fixture produced a 109-byte AF_UNIX socket path. The same failure reproduces on `57491e918`, with identical fixture/test blobs. The retry will set `INFRATERNAL_AGENT_TEST_STATE_ROOT=/tmp/j32` inside the Nix shell. - The production Chromium boundary/incarnation/process-group suite and the Nix WebKit software-GL attempt are queued through compute01 `build-slot` at positions 3 and 6. Neither has started assertions or produced WebKit startup evidence yet. Logs: `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/chromium.log` and `webkit-nix.log`. I will run the corrected full gate after the browser work to avoid rebuilding its target concurrently, then post the exact results and split the WIP tail into three atomic commits.
Author
Owner

J32 runner correction at d951dc19a on layout-per-tab-250:

The first Chromium process acquired a compute01 slot, then exited 127 before the production build or any assertions because its nested bash -lc dropped the Nix shell's bun path (bash: line 7: bun: command not found). I preserved that transcript as chromium-login-shell.log / chromium-login-shell.exit; it is a runner setup failure, not a test result. The runner now uses bash -c and is queued again through build-slot (chromium.log).

The initial WebKit runner used the same nested-login-shell pattern. It was stopped by its own PIDs while still waiting for a slot; no WebKit assertion ran. I will start the corrected Nix/software-GL attempt after Chromium completes.

J32 runner correction at `d951dc19a` on `layout-per-tab-250`: The first Chromium process acquired a compute01 slot, then exited 127 before the production build or any assertions because its nested `bash -lc` dropped the Nix shell's `bun` path (`bash: line 7: bun: command not found`). I preserved that transcript as `chromium-login-shell.log` / `chromium-login-shell.exit`; it is a runner setup failure, not a test result. The runner now uses `bash -c` and is queued again through `build-slot` (`chromium.log`). The initial WebKit runner used the same nested-login-shell pattern. It was stopped by its own PIDs while still waiting for a slot; no WebKit assertion ran. I will start the corrected Nix/software-GL attempt after Chromium completes.
Author
Owner

J32 Chromium runtime update at d951dc19a:

The shell-corrected production run built the tracer, but Playwright could not launch Chromium because the VM image lacks libnspr4.so (also libnss3.so, ATK, X11 extensions, GBM, XKB, ALSA and AT-SPI). Both session-boundary tests exited before browser launch; no product assertions ran and no screenshot was produced. I added the matching Nix runtime closure, including at-spi2-core; the preflight ldd check now reports Chromium Playwright runtime dependencies: PASS.

The corrected Chromium suite is queued through build-slot; its output will be at ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/chromium-libs.log. It runs the same-account boundary, cross-account canonical reads, existing incarnation probe and process-group regression separately so later specs still run if an earlier assertion fails.

J32 Chromium runtime update at `d951dc19a`: The shell-corrected production run built the tracer, but Playwright could not launch Chromium because the VM image lacks `libnspr4.so` (also `libnss3.so`, ATK, X11 extensions, GBM, XKB, ALSA and AT-SPI). Both session-boundary tests exited before browser launch; no product assertions ran and no screenshot was produced. I added the matching Nix runtime closure, including `at-spi2-core`; the preflight `ldd` check now reports `Chromium Playwright runtime dependencies: PASS`. The corrected Chromium suite is queued through `build-slot`; its output will be at `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/chromium-libs.log`. It runs the same-account boundary, cross-account canonical reads, existing incarnation probe and process-group regression separately so later specs still run if an earlier assertion fails.
Author
Owner

J32b start — continuing layout-per-tab-250 at d951dc19aaf3e577cc9fc9fbc71fcfba4157c9d4 (clean worktree). Requested base: origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0. The carried branch is currently based on 57491e918; I’m rebasing it onto the requested tip before continuing.

Round 2 left P2 R250-R2-01 (revoked screen accepts edits that saves drop) and P3 R250-R2-02 (bare Hello capability 16n). I’m also completing the fixture process-group teardown fix (two address in use retries; 1,143.072 ms against 350 ms) and making the account-switch probe conclusive.

D312 specifies what to do when a Welcome changes the session incarnation, but does not specify the still-open screen after access revocation. I’ll follow the requested conservative behavior: stop accepting edits and show the plain unsaved/lost-edit state, for kayg’s review.

Next: complete targeted and production-browser regressions, try WebKit with Nix software GL, run scripts/verify fast, report the D243 size delta, and post the per-finding evidence. No deployment.

J32b start — continuing `layout-per-tab-250` at `d951dc19aaf3e577cc9fc9fbc71fcfba4157c9d4` (clean worktree). Requested base: `origin/dev` `f4b61cd6c3f52078cad7573c5367d7a6e75f84f0`. The carried branch is currently based on `57491e918`; I’m rebasing it onto the requested tip before continuing. Round 2 left P2 R250-R2-01 (revoked screen accepts edits that saves drop) and P3 R250-R2-02 (bare Hello capability `16n`). I’m also completing the fixture process-group teardown fix (two `address in use` retries; 1,143.072 ms against 350 ms) and making the account-switch probe conclusive. D312 specifies what to do when a Welcome changes the session incarnation, but does not specify the still-open screen after access revocation. I’ll follow the requested conservative behavior: stop accepting edits and show the plain unsaved/lost-edit state, for kayg’s review. Next: complete targeted and production-browser regressions, try WebKit with Nix software GL, run `scripts/verify fast`, report the D243 size delta, and post the per-finding evidence. No deployment.
Author
Owner

J32b rebase/checkpoint on layout-per-tab-250 at f04e4631a4bcfae169a01edb2714cfa22c4ec494, rebased onto origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0 and pushed with lease. The compute01 job worktree is synced, and nix develop -c true succeeds there.

After the rebase, the focused tracer unit tests pass: 28 pass, 0 fail, 113 expectations, including revoked-store edit rejection and the named D312 Hello bit. Log: /home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-green-after-rebase.log. The earlier failing-first evidence for the capability and revoked store, and process-group regression, is recorded in comments 248, 261–263; the production revocation reproduction is in the round-2 summary at comment 243.

Next through compute01 build-slot: run scripts/verify fast, build the production tracer, verify the same-account revocation and both-account canonical reads in Chromium, and run the deterministic process-group test. Then try WebKit with Nix software GL. No new browser or final-gate result is claimed yet.

J32b rebase/checkpoint on `layout-per-tab-250` at `f04e4631a4bcfae169a01edb2714cfa22c4ec494`, rebased onto `origin/dev` `f4b61cd6c3f52078cad7573c5367d7a6e75f84f0` and pushed with lease. The compute01 job worktree is synced, and `nix develop -c true` succeeds there. After the rebase, the focused tracer unit tests pass: 28 pass, 0 fail, 113 expectations, including revoked-store edit rejection and the named D312 Hello bit. Log: `/home/claude/.cache/codex-scratch/j32-layout-per-tab-250/evidence/unit-green-after-rebase.log`. The earlier failing-first evidence for the capability and revoked store, and process-group regression, is recorded in comments 248, 261–263; the production revocation reproduction is in the round-2 summary at comment 243. Next through compute01 `build-slot`: run `scripts/verify fast`, build the production tracer, verify the same-account revocation and both-account canonical reads in Chromium, and run the deterministic process-group test. Then try WebKit with Nix software GL. No new browser or final-gate result is claimed yet.
Author
Owner

J32b resumed on branch layout-per-tab-250 at f04e4631a4, based on origin/dev f4b61cd6c3. I am continuing the round-2 fixes and evidence: revoked-tab behavior, named Hello capability, fixture process-group teardown, account-switch probe, Chromium/WebKit status, and scripts/verify fast. Existing carried worktree is clean; focused checks are recorded as green, with real-server/browser gates pending.

J32b resumed on branch layout-per-tab-250 at f04e4631a4bcfae169a01edb2714cfa22c4ec494, based on origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0. I am continuing the round-2 fixes and evidence: revoked-tab behavior, named Hello capability, fixture process-group teardown, account-switch probe, Chromium/WebKit status, and scripts/verify fast. Existing carried worktree is clean; focused checks are recorded as green, with real-server/browser gates pending.
Author
Owner

J32b progress on layout-per-tab-250 (current tree f04e4631a), rebased onto origin/dev f4b61cd6c.

D312 does not specify what a tab should show after its authenticated session is replaced. The implementation takes the conservative option: revoke the old layout store, ignore subsequent edits/events, end the old canvas, and display a plain sign-in message that reports pending edits lost when applicable. Please decide whether this is the desired revocation state; the choice is not recorded in D312.

R250-R2-01's same-account and cross-account production browser checks, R250-R2-02's named Hello capability, and the fixture process-group teardown regression are present on this tree. Focused Chromium runs and scripts/verify fast are in progress on compute01. Gate log: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast-after-rebase.log.

J32b progress on `layout-per-tab-250` (current tree `f04e4631a`), rebased onto `origin/dev` `f4b61cd6c`. D312 does not specify what a tab should show after its authenticated session is replaced. The implementation takes the conservative option: revoke the old layout store, ignore subsequent edits/events, end the old canvas, and display a plain sign-in message that reports pending edits lost when applicable. Please decide whether this is the desired revocation state; the choice is not recorded in D312. R250-R2-01's same-account and cross-account production browser checks, R250-R2-02's named Hello capability, and the fixture process-group teardown regression are present on this tree. Focused Chromium runs and `scripts/verify fast` are in progress on compute01. Gate log: `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast-after-rebase.log`.
Author
Owner

J32b progress: the exact-head Rust checks passed through tests, clippy, cargo-deny, native fixtures and gate architecture. scripts/verify fast stopped at the old static-size ceiling check: x86_64 21,448,272 bytes (+4,448) and aarch64 19,635,240 bytes (+6,000). The orchestrator brief says D243 caps are removed; I am not changing their values. The log is ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast-after-rebase.log.

The TypeScript verification stage is running through build-slot on compute01 and is queued behind other jobs (position 10 at 08:36 IST). Next: finish TS verification, rerun the exact-head production Chromium specs, try headless WPE with Nix Mesa/llvmpipe, split the WIP commits atomically, push with lease, attach evidence and clean the target directory.

J32b progress: the exact-head Rust checks passed through tests, clippy, cargo-deny, native fixtures and gate architecture. `scripts/verify fast` stopped at the old static-size ceiling check: x86_64 21,448,272 bytes (+4,448) and aarch64 19,635,240 bytes (+6,000). The orchestrator brief says D243 caps are removed; I am not changing their values. The log is `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/fast-after-rebase.log`. The TypeScript verification stage is running through `build-slot` on compute01 and is queued behind other jobs (position 10 at 08:36 IST). Next: finish TS verification, rerun the exact-head production Chromium specs, try headless WPE with Nix Mesa/llvmpipe, split the WIP commits atomically, push with lease, attach evidence and clean the target directory.
Author
Owner

J32b history update: branch layout-per-tab-250 is now pushed with lease at bd670c8861b3265097d3010e6fe3f0b87d1338f6 as three atomic commits. The resulting source tree 1a2f2077ac953014c09deefeb2adaa290c621fe2 is identical to the tree used by the fast-gate run, whose only reported Rust failure was the removed D243 size cap.

TypeScript verification is still waiting in compute01's build-slot queue. After it completes, I will run the production Chromium specs and the headless Nix Mesa/llvmpipe WebKit attempt, then attach evidence and clean the target directory.

J32b history update: branch `layout-per-tab-250` is now pushed with lease at `bd670c8861b3265097d3010e6fe3f0b87d1338f6` as three atomic commits. The resulting source tree `1a2f2077ac953014c09deefeb2adaa290c621fe2` is identical to the tree used by the fast-gate run, whose only reported Rust failure was the removed D243 size cap. TypeScript verification is still waiting in compute01's build-slot queue. After it completes, I will run the production Chromium specs and the headless Nix Mesa/llvmpipe WebKit attempt, then attach evidence and clean the target directory.
Author
Owner

J32b progress on layout-per-tab-250 at bd670c8861b3265097d3010e6fe3f0b87d1338f6, based on origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0.

TypeScript verification completed with 39 pass, 0 fail, and 59,970 expectations. The first Chromium run reached Playwright, but three specs failed before app assertions because the runner forced all server fixtures onto port 4481 with two workers; the session-incarnation spec passed. I corrected the runner to use distinct ports 4791–4794 and queued the production rerun.

The first WebKit attempt exited 127 before browser launch: its helper used a stale Nix libwpe path and put Nix glibc on the host loader path. The retry resolves the matching Nix package outputs dynamically, excludes glibc from LD_LIBRARY_PATH, and enables llvmpipe/surfaceless EGL.

Both corrected browser runs are waiting in compute01's build-slot queue. No result is claimed for them yet. Logs are in ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/: ts-and-chromium-port-collision.log, chromium-rerun.log, webkit-initial-runtime-failure.log, and webkit-software-gl-retry.log. Next: finish the browser runs, attach exact-head evidence, then remove the VM target directory.

J32b progress on `layout-per-tab-250` at `bd670c8861b3265097d3010e6fe3f0b87d1338f6`, based on `origin/dev` `f4b61cd6c3f52078cad7573c5367d7a6e75f84f0`. TypeScript verification completed with 39 pass, 0 fail, and 59,970 expectations. The first Chromium run reached Playwright, but three specs failed before app assertions because the runner forced all server fixtures onto port 4481 with two workers; the session-incarnation spec passed. I corrected the runner to use distinct ports 4791–4794 and queued the production rerun. The first WebKit attempt exited 127 before browser launch: its helper used a stale Nix libwpe path and put Nix glibc on the host loader path. The retry resolves the matching Nix package outputs dynamically, excludes glibc from LD_LIBRARY_PATH, and enables llvmpipe/surfaceless EGL. Both corrected browser runs are waiting in compute01's build-slot queue. No result is claimed for them yet. Logs are in `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/`: `ts-and-chromium-port-collision.log`, `chromium-rerun.log`, `webkit-initial-runtime-failure.log`, and `webkit-software-gl-retry.log`. Next: finish the browser runs, attach exact-head evidence, then remove the VM target directory.
Author
Owner

J32b queue checkpoint on layout-per-tab-250 @ bd670c8861b3265097d3010e6fe3f0b87d1338f6.

The corrected headless WebKit software-GL retry has waited about 30 minutes in compute01 build-slot (last reported queue position 8); the corrected Chromium rerun has waited about 30 minutes (last reported position 9). Neither has started its test command or produced browser assertions. The earlier Chromium EADDRINUSE and WebKit loader failures were runner setup issues and remain classified separately in the prior checkpoint.

Logs: ~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/webkit-software-gl-retry.log and chromium-rerun.log. I’ll continue when compute01 admits the queued runs, then attach final exact-head evidence and remove the VM target directory.

J32b queue checkpoint on `layout-per-tab-250` @ `bd670c8861b3265097d3010e6fe3f0b87d1338f6`. The corrected headless WebKit software-GL retry has waited about 30 minutes in compute01 `build-slot` (last reported queue position 8); the corrected Chromium rerun has waited about 30 minutes (last reported position 9). Neither has started its test command or produced browser assertions. The earlier Chromium EADDRINUSE and WebKit loader failures were runner setup issues and remain classified separately in the prior checkpoint. Logs: `~/.cache/codex-scratch/j32-layout-per-tab-250/evidence/webkit-software-gl-retry.log` and `chromium-rerun.log`. I’ll continue when compute01 admits the queued runs, then attach final exact-head evidence and remove the VM target directory.
Author
Owner

J32b exact-head evidence is attached below.

J32b exact-head evidence is attached below.
Author
Owner

J32b browser progress on layout-per-tab-250 @ bd670c8861b3265097d3010e6fe3f0b87d1338f6.

Exact-head TypeScript verification passed 39 tests / 0 failures / 59,970 expectations. The corrected production Chromium rerun passed all four scenarios: same-account revocation, account switch, session incarnation, and fixture process-group teardown. The account-switch test read both accounts' canonical layouts, observed no layout apply after the edit attempt, and required the old screen to end. The unit log, gate transcript, browser log, and three production screenshots are attached in comment 72785.

The corrected headless WebKit attempt uses Nix WebKitGTK/Mesa/libwpe, llvmpipe, surfaceless EGL, and an LD_LIBRARY_PATH excluding Nix glibc/libuv. A Node preflight passes. It remains queued through compute01 build-slot at position 12, waiting about 85 minutes; no WebKit assertions have run. If it reaches WPE EGL startup and still fails there, I’ll record the runtime failure in a separate issue and link it here.

J32b browser progress on `layout-per-tab-250` @ `bd670c8861b3265097d3010e6fe3f0b87d1338f6`. Exact-head TypeScript verification passed 39 tests / 0 failures / 59,970 expectations. The corrected production Chromium rerun passed all four scenarios: same-account revocation, account switch, session incarnation, and fixture process-group teardown. The account-switch test read both accounts' canonical layouts, observed no layout apply after the edit attempt, and required the old screen to end. The unit log, gate transcript, browser log, and three production screenshots are attached in comment 72785. The corrected headless WebKit attempt uses Nix WebKitGTK/Mesa/libwpe, llvmpipe, surfaceless EGL, and an LD_LIBRARY_PATH excluding Nix glibc/libuv. A Node preflight passes. It remains queued through compute01 `build-slot` at position 12, waiting about 85 minutes; no WebKit assertions have run. If it reaches WPE EGL startup and still fails there, I’ll record the runtime failure in a separate issue and link it here.
Author
Owner

J32b round 3 (last) — layout-per-tab-250 @ bd670c8861b3265097d3010e6fe3f0b87d1338f6, rebased on origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0.

  • R250-R2-01 (P2): fixed. On session-incarnation change the old layout store clears its pending journal, refuses edits and later events, and ends the old canvas. When pending edits were lost, the sign-in screen says “Not saved. Changes waiting to save were lost. Sign in again to continue.” Production Chromium passed the same-account replacement case; its canonical server layout stayed unchanged after the old screen ended. D312 does not specify revocation UX; this conservative sign-in state is implemented for the owner to review.
  • R250-R2-02 (P3): fixed. Replaced the bare 16n Hello capability with named LAYOUT_SESSION_INCARNATION; the bit-4 unit test passes.
  • Fixture race: fixed. Restart now waits for its owned process group before relaunch. This addresses the earlier two address-in-use retries and 1,143.072 ms result against 350 ms. The delayed-child process-group regression passes.
  • Account-switch probe: resolved. The corrected real-browser probe reads both accounts’ canonical layouts and verifies no canvas.layout.apply was sent after the cookie switched. It passes; the earlier probe was inconclusive.

The corrected production Chromium rerun passed all 4 focused cases (same-account revocation, account switch, session incarnation, process-group teardown). The TypeScript suite passed 39 tests with 0 failures and 59,970 expectations. The fast log, Chromium log, unit log, and desktop/mobile screenshots are attached in comment 72785.

WebKit still could not reach app assertions after the headless Nix WebKit + Mesa llvmpipe retry. Playwright stopped at launch with missing libGLESv2.so.2 and libx264.so; the earlier WPE attempt failed with Could not create WPE EGL display: EGL_BAD_PARAMETER. The log is attached to issue #288.

scripts/verify fast Rust gate summary (verbatim):

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| gate architecture         | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

The remaining row is the existing size check against removed D243 caps. The measured stripped static binaries are x86_64 21,448,272 bytes (+4,448) and aarch64 19,635,240 bytes (+6,000) against those former caps; no cap was changed.

J32b round 3 (last) — `layout-per-tab-250` @ `bd670c8861b3265097d3010e6fe3f0b87d1338f6`, rebased on `origin/dev` `f4b61cd6c3f52078cad7573c5367d7a6e75f84f0`. - **R250-R2-01 (P2): fixed.** On session-incarnation change the old layout store clears its pending journal, refuses edits and later events, and ends the old canvas. When pending edits were lost, the sign-in screen says “Not saved. Changes waiting to save were lost. Sign in again to continue.” Production Chromium passed the same-account replacement case; its canonical server layout stayed unchanged after the old screen ended. D312 does not specify revocation UX; this conservative sign-in state is implemented for the owner to review. - **R250-R2-02 (P3): fixed.** Replaced the bare `16n` Hello capability with named `LAYOUT_SESSION_INCARNATION`; the bit-4 unit test passes. - **Fixture race: fixed.** Restart now waits for its owned process group before relaunch. This addresses the earlier two address-in-use retries and 1,143.072 ms result against 350 ms. The delayed-child process-group regression passes. - **Account-switch probe: resolved.** The corrected real-browser probe reads both accounts’ canonical layouts and verifies no `canvas.layout.apply` was sent after the cookie switched. It passes; the earlier probe was inconclusive. The corrected production Chromium rerun passed all 4 focused cases (same-account revocation, account switch, session incarnation, process-group teardown). The TypeScript suite passed 39 tests with 0 failures and 59,970 expectations. The fast log, Chromium log, unit log, and desktop/mobile screenshots are attached in comment 72785. WebKit still could not reach app assertions after the headless Nix WebKit + Mesa llvmpipe retry. Playwright stopped at launch with missing `libGLESv2.so.2` and `libx264.so`; the earlier WPE attempt failed with `Could not create WPE EGL display: EGL_BAD_PARAMETER`. The log is attached to [issue #288](https://git.kayg.org/kayg/infraternal/issues/288). `scripts/verify fast` Rust gate summary (verbatim): ``` +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | gate architecture | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` The remaining row is the existing size check against removed D243 caps. The measured stripped static binaries are x86_64 **21,448,272 bytes (+4,448)** and aarch64 **19,635,240 bytes (+6,000)** against those former caps; no cap was changed.
Author
Owner

J63 independent review round 3 started. Reviewing layout-per-tab-250 at bd670c8861 against origin/dev f4b61cd6c3 in isolated detached worktree /home/kayg/Developer/Worktrees/infraternal-j63-review. Scope: R250-R2-01/02, revocation event ordering, fixture process-group wait, conclusive cross-account canonical checks, protocol/store isolation and reconnect incarnation. No code changes; verify fast is not applicable to this review unless needed to prove a finding.

J63 independent review round 3 started. Reviewing layout-per-tab-250 at bd670c8861b3265097d3010e6fe3f0b87d1338f6 against origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0 in isolated detached worktree /home/kayg/Developer/Worktrees/infraternal-j63-review. Scope: R250-R2-01/02, revocation event ordering, fixture process-group wait, conclusive cross-account canonical checks, protocol/store isolation and reconnect incarnation. No code changes; verify fast is not applicable to this review unless needed to prove a finding.
Author
Owner

J63 independent review round 3 (last): REQUEST CHANGES.

Reviewed layout-per-tab-250 at bd670c8861b3265097d3010e6fe3f0b87d1338f6 against origin/dev f4b61cd6c3f52078cad7573c5367d7a6e75f84f0, D312, the round-2 findings, and fix/evidence comments 72785/72812. One new P2; no P0/P1.

  1. R250-R3-01 — P2: the revocation message falsely reports server-confirmed edits as lost. apps/tracer/src/canvas/model/server-store.ts:66 takes lost from pending, whose getter at line 78 includes entries with successful receipts still awaiting canonical coverage. apps/tracer/src/main.ts:457 turns this into “Changes waiting to save were lost.” Reproduction: receive snapshot revision 1; submit a rename; receive its successful {revision: 2} Result, with its ordered event delayed; reconnect after same-account session replacement. The journal retains the confirmed overlay, so revocation calls onSessionRevoked(true) and shows the loss message even though revision 2 is committed and will reappear on sign-in. D312 explicitly preserves confirmed edits. Distinguish receipt-confirmed work from unconfirmed work, and use uncertainty-safe wording for sent work without a receipt; dropping a local queue does not establish that its edits were lost on the server. Keep the current teardown and fencing.

    Independent deterministic test on claude@infraternal-dev-02-std, through ~/infraternal-ops/build-slot nice -n10 nix develop -c bun test …, fails at the actual revocation callback:

    error: a server-confirmed edit survives sign-out; do not claim that it was lost
    Expected to not contain: true
    Received: [ true ]
    (fail) R250-R3-01: a successful receipt must not be reported as lost on session replacement
    

    Exact-head focused result, verbatim:

     9 pass
     1 fail
     39 expect() calls
    Ran 10 tests across 4 files. [9.00ms]
    

    The identical finding test passes on requested baseline f4b61cd6c (1 pass, 0 fail, 3 expectations; the baseline has no revocation-loss callback), and the earlier version of the same probe passes on immediate pre-fix parent 49a0f0ef3. This is a message regression, not evidence of actual server data loss. Test and positive late-callback control are committed locally on review-j63-layout-250 at 2630e3300556357bdd9990dbddc1edeb58fc1390; no product changes or push.

Other review results:

  • R250-R2-01: original editable-screen defect fixed. Changed incarnation clears the journal and sets the revoked flag synchronously before notifying the caller. save, event admission and the pump reject revoked work. Clearing the journal advances its epoch, so late receipt/refusal callbacks cannot resurrect entries. The caller ends the old screen, with generation guards also covering revocation during initial load. The independent combined late-operation/late-snapshot/late-receipt/late-edit control passes without relying on disposal. The newly introduced wording issue is finding 1 above.
  • R250-R2-02: fixed. The client advertises named LAYOUT_SESSION_INCARNATION; its bit-4 test passes independently.
  • Fixture process-group wait: reviewed the TERM/wait/KILL/bounded-wait sequence and launcher-exit check. No new finding. Comment 72785's attached Chromium transcript confirms the delayed-child regression passed; this review did not rerun the real-server/browser suite.
  • Account-switch probe: now reaches both authenticated canonical reads before final assertions, verifies both account layouts unchanged, and requires replacement Welcome plus old-screen teardown. The conditional edit attempt checks its apply count. The attached Chromium transcript records both account-switch and same-account cases passing.
  • Protocol/store security: no additional finding in the reviewed diff. HTTP and negotiated Welcome derive the same domain-separated session label; original-lifetime reconnects preserve it. Layout calls compare the authenticated socket label before receipts/mutation, with existing authority guards retained. Store heads, receipts, operation tails and reference ownership remain scoped to the authenticated account. Both codecs validate the additive suffix. Old-route message dispatch and the revoked-store/epoch guards cover late events and receipts.

No product code changed; scripts/verify fast not run, as requested for this review. The removed D243 size-cap failure and WebKit #288 are not findings. No browser/build/server remains running. No target directory was created; the temporary VM review worktree was removed. Small evidence logs remain at /home/claude/.cache/codex-scratch/j63-review/evidence/ on dev-02 and are attached here.

J63 independent review round 3 (last): **REQUEST CHANGES**. Reviewed `layout-per-tab-250` at `bd670c8861b3265097d3010e6fe3f0b87d1338f6` against `origin/dev` `f4b61cd6c3f52078cad7573c5367d7a6e75f84f0`, D312, the round-2 findings, and fix/evidence comments 72785/72812. One new P2; no P0/P1. 1. **R250-R3-01 — P2: the revocation message falsely reports server-confirmed edits as lost.** `apps/tracer/src/canvas/model/server-store.ts:66` takes `lost` from `pending`, whose getter at line 78 includes entries with successful receipts still awaiting canonical coverage. `apps/tracer/src/main.ts:457` turns this into “Changes waiting to save were lost.” Reproduction: receive snapshot revision 1; submit a rename; receive its successful `{revision: 2}` Result, with its ordered event delayed; reconnect after same-account session replacement. The journal retains the confirmed overlay, so revocation calls `onSessionRevoked(true)` and shows the loss message even though revision 2 is committed and will reappear on sign-in. D312 explicitly preserves confirmed edits. Distinguish receipt-confirmed work from unconfirmed work, and use uncertainty-safe wording for sent work without a receipt; dropping a local queue does not establish that its edits were lost on the server. Keep the current teardown and fencing. Independent deterministic test on `claude@infraternal-dev-02-std`, through `~/infraternal-ops/build-slot nice -n10 nix develop -c bun test …`, fails at the actual revocation callback: ```text error: a server-confirmed edit survives sign-out; do not claim that it was lost Expected to not contain: true Received: [ true ] (fail) R250-R3-01: a successful receipt must not be reported as lost on session replacement ``` Exact-head focused result, verbatim: ```text 9 pass 1 fail 39 expect() calls Ran 10 tests across 4 files. [9.00ms] ``` The identical finding test passes on requested baseline `f4b61cd6c` (1 pass, 0 fail, 3 expectations; the baseline has no revocation-loss callback), and the earlier version of the same probe passes on immediate pre-fix parent `49a0f0ef3`. This is a message regression, not evidence of actual server data loss. Test and positive late-callback control are committed locally on `review-j63-layout-250` at `2630e3300556357bdd9990dbddc1edeb58fc1390`; no product changes or push. Other review results: - **R250-R2-01: original editable-screen defect fixed.** Changed incarnation clears the journal and sets the revoked flag synchronously before notifying the caller. `save`, event admission and the pump reject revoked work. Clearing the journal advances its epoch, so late receipt/refusal callbacks cannot resurrect entries. The caller ends the old screen, with generation guards also covering revocation during initial load. The independent combined late-operation/late-snapshot/late-receipt/late-edit control passes without relying on disposal. The newly introduced wording issue is finding 1 above. - **R250-R2-02: fixed.** The client advertises named `LAYOUT_SESSION_INCARNATION`; its bit-4 test passes independently. - **Fixture process-group wait:** reviewed the TERM/wait/KILL/bounded-wait sequence and launcher-exit check. No new finding. Comment 72785's attached Chromium transcript confirms the delayed-child regression passed; this review did not rerun the real-server/browser suite. - **Account-switch probe:** now reaches both authenticated canonical reads before final assertions, verifies both account layouts unchanged, and requires replacement Welcome plus old-screen teardown. The conditional edit attempt checks its apply count. The attached Chromium transcript records both account-switch and same-account cases passing. - **Protocol/store security:** no additional finding in the reviewed diff. HTTP and negotiated Welcome derive the same domain-separated session label; original-lifetime reconnects preserve it. Layout calls compare the authenticated socket label before receipts/mutation, with existing authority guards retained. Store heads, receipts, operation tails and reference ownership remain scoped to the authenticated account. Both codecs validate the additive suffix. Old-route message dispatch and the revoked-store/epoch guards cover late events and receipts. No product code changed; `scripts/verify fast` not run, as requested for this review. The removed D243 size-cap failure and WebKit #288 are not findings. No browser/build/server remains running. No target directory was created; the temporary VM review worktree was removed. Small evidence logs remain at `/home/claude/.cache/codex-scratch/j63-review/evidence/` on dev-02 and are attached here.
Author
Owner

Orchestrator fix for R250-R3-01 (small, message-only), pushed as 852e15b76 on layout-per-tab-250.

When access is revoked, the screen now reports what the tab actually knows (RevokedWork):

  • unsent: an edit never left the tab. Message: "Not saved. Changes waiting to save were lost. Sign in again to continue."
  • unconfirmed: everything was sent, but something has no receipt yet. Message: "Your sign-in changed. Your last changes may not have saved. Sign in again to check."
  • none: every queued edit has a receipt. Message: "Your sign-in changed. Sign in again to continue."

An unconfirmed migration counts as unconfirmed, because its legacy source stays on disk. Teardown and fencing are unchanged.

New tests in session-incarnation.test.ts:

  • R250-R3-01: a {revision: 2} receipt arrives, its event is delayed, then the session is replaced. Expected ["none"].
  • A sent edit without a receipt. Expected ["unconfirmed"].

Results on dev-02:

bun test src/canvas/model
 91 pass
 0 fail
 9015 expect() calls
Ran 91 tests across 16 files. [11.40s]
tsc --noEmit: exit 0

scripts/verify fast is running on compute01. I'll post its output here before merging.

Orchestrator fix for **R250-R3-01** (small, message-only), pushed as `852e15b76` on `layout-per-tab-250`. When access is revoked, the screen now reports what the tab actually knows (`RevokedWork`): - `unsent`: an edit never left the tab. Message: "Not saved. Changes waiting to save were lost. Sign in again to continue." - `unconfirmed`: everything was sent, but something has no receipt yet. Message: "Your sign-in changed. Your last changes may not have saved. Sign in again to check." - `none`: every queued edit has a receipt. Message: "Your sign-in changed. Sign in again to continue." An unconfirmed migration counts as `unconfirmed`, because its legacy source stays on disk. Teardown and fencing are unchanged. New tests in `session-incarnation.test.ts`: - R250-R3-01: a `{revision: 2}` receipt arrives, its event is delayed, then the session is replaced. Expected `["none"]`. - A sent edit without a receipt. Expected `["unconfirmed"]`. Results on dev-02: ``` bun test src/canvas/model 91 pass 0 fail 9015 expect() calls Ran 91 tests across 16 files. [11.40s] tsc --noEmit: exit 0 ``` `scripts/verify fast` is running on compute01. I'll post its output here before merging.
Sign in to join this conversation.
No labels
launch-qa
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#250
No description provided.