10/10 retained rows. R1 backgrounds streamed person input at head; S4 is a labelled result-delay harness. Full findings and reproduction: Evidence.md.
Before selects agent-target and the unassisted suffix lands in the URL field. After keeps Focus source and the composer gets -typed-A1. Destination is present in both.

B stays the displayed thread. Before loses B composer focus; the same unassisted suffix activates a Terminal 1 surface and leaves the composer unchanged. After retains B/Files and types -typed-A2 into B. Separate inspection proves the destination belongs to A.

Before replaces Files with agent-target and sends suffix to the URL field. After retains Files and appends the suffix to the composer. Both create the destination.

Before opens Browser, narrows/reflows the chat, hides the existing thread-details card, and sends suffix to the URL field. After keeps the panel closed, chat width/details placement, and composer suffix. Both create the destination.

Both native person clicks foreground person-target and focus the URL field. Native focusedFrame is true; observed input age exceeds 18 seconds. Nine pixels differ at zero threshold in the address-bar icon area (x1312–1317,y40–66); none exceed 16/255.

At head, the agent destination opens background with focusedFrame=false. The OS person click follows 0.71 s after the MCP-action log; at native handler focusedFrame=true and observed input age=342.8 ms. person-target foregrounds; separate inspection proves agent-target is still present.

Both native middle-clicks emit background-tab, retain Focus source, and create person-target. Final app frames are pixel-identical at zero threshold; nothing else changed in these final app frames.

Both emit foreground-tab with focusedFrame=false after observed native dispatch ages 6453.6 / 6480.5 ms and foreground agent-target. No intervening qualifying guest command appears in the timing log. Nine toolbar pixels differ at zero threshold; none exceed 16/255. This is the preserved expiry limit, not protected background behavior.

Both OS-select sibling-A during the real command-result delay. Before displays sibling-A in the URL/selection but agent-target content; After keeps sibling-A URL, selected surface and content together. New destination remains available in a separate inspection. This row is deliberately a result-delay harness.

The real web viewer clicks person-target through its streamed canvas. Both native handlers see foreground-tab with focusedFrame=false. Before sends background=false and foregrounds person-target on desktop; After sends background=true and retains desktop Focus source/composer. Observed native input ages are 4.23 ms Before / 10.90 ms After. The viewer keeps the source surface/URL/content on BOTH revisions while its shared snapshot activeTabId names the destination: a baseline viewer limitation, not a newly demonstrated viewer regression. Its final auxiliary screenshots are pixel-identical at zero threshold.
