# Runtime evidence for PR [#18588](https://git.cafe/pingdotgg/t3code/pulls/18588)

Status: PASS, rows 4/4; status and snapshot verified for every row (8/8 captures).

Before: [8acbefefc5](https://git.cafe/pingdotgg/t3code/commit/8acbefefc51b4d281dcd04108c82baa1ab902b0e).
After: [5dbd412d69](https://git.cafe/pingdotgg/t3code/commit/5dbd412d6964143b874134d7b8265e017fdb3af0).

| Row | Before: status + snapshot | After: status + snapshot | Result |
| --- | --- | --- | --- |
| Reporter self-signed.badssl.com | Error page; loadError absent | -202 ERR_CERT_AUTHORITY_INVALID; exact failed URL | PASS |
| Local certificate :18443 | Error page; loadError absent | -202 ERR_CERT_AUTHORITY_INVALID; exact failed URL | PASS |
| Unsafe port :1 | Error page; loadError absent | -2 ERR_UNSAFE_PORT; exact failed URL | PASS |
| Recovery :18080 | Working page; loadError absent | Working page; loadError absent | PASS |

Environment: Linux x86_64, Node v24.21.0, real Chromium 148.0.7778.96 (headless shell revision 1223), viewport 1280x800. Real ServerBrowser, PreviewAutomationBroker and Chromium; no mocks. T3CODE_SERVER_BROWSER_SANDBOX=0 for fixture infrastructure. Config.layerTest supplies temporary isolated state. Head captured 2026-10-22 02:32 UTC.

Commands are in the accompanying commands artifact. Baseline and head harness files compared byte-for-byte equal. The shared harness waits for observable chrome-error:// URL before failure capture and Working page before recovery capture. Separate assertions compare both transcripts: baseline has no loadError; head has exact code, description and failed URL for each failure, and no loadError after recovery. Both status and snapshot checked. Harness process exited 0 with empty stderr.

Cleanup: scoped browser closed; finally-owned HTTP/TLS fixture servers closed. Neither fixture port had a listener after completion. Chromium process inventory after completion matched the pre-run inventory; existing unrelated Chromium processes were left alone. Checkout remained clean. No source edits, commits, forge writes, dev servers or browser UI.

Visual matrix: empty. No rendered changes captured. Screenshot bitmap payloads omitted by harness (dimensions/MIME retained). Live Electron unverified.

Baseline transcript: [baseline JSONL](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b9616a60ed11afe/18555-runtime-main-committed.jsonl).

Uploaded harness is a safe copy with local fixture credential filenames replaced by placeholders; key and certificate contents are excluded. Local execution used the original supplied harness unchanged.

FRICTION:
- brief: Prior capture waited for an uncommitted implementation; this rerun received the exact committed SHA.
- tool: Prior Bun attempt lacked node:sea; supplied Node command succeeds.
- runbook: Immediate status can precede error-page commit; supplied harness waits for observable error-page URL.

Artifacts:
- [Head transcript](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9dae93dee0ae1bc0/18555-runtime-head.jsonl)
- [Commands](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/30a2538fcab642f4/18555-proof-commands.sh)
- [Safe harness](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/49501d477e2d9c29/18555-proof-runtime-safe.ts)