# Proof audit pass 2

Findings: no blocking code defect, contradicted applicable row, fabricated event/state, or missing required capture found. Evidence is SUFFICIENT for the requested server-only acceptance matrix. This is a proof verdict, not permission to merge or a claim that replacement CI is green.

Reviewed [#21229](https://git.cafe/pingdotgg/t3code/pulls/21229), contributor anesthetised/t3code revision [38ed4c02](https://github.com/anesthetised/t3code/commit/38ed4c02a37eb69869911cfdd15f8a6f28f9135a), replacement takeover/pr-21229 at [42fd3db9df](https://github.com/pingdotgg/t3code/commit/42fd3db9df8e7c53ae02a27ff12613aec0622f9b), against base/merge-base [843f4e3529](https://github.com/pingdotgg/t3code/commit/843f4e35292391897089535e8f1af59b322e70f8).

| Row | Status | Checked proof |
|---|---|---|
| T1 | SUFFICIENT | Final-head client test returns the complete v2 error after prompt acknowledgement, not just stopReason. Supplied six-file scoped run reports 212 passed. |
| T2 | SUFFICIENT | Both details/none adapter cases assert foreground failure, monitor remains running, child tool belongs to a different thread with mapped native identity, no phantom root child, childTurnsContinue, actual late subagent completion, and subsequent success. Synthetic extractor hooks are explicit. |
| T3 | SUFFICIENT | Grok-flavored test uses makeXAiPromptCompletionRuntime; the buffered command's last update is completed in the collected stream before failed terminal. Fixture emits BackgroundTaskStarted then _x.ai/task_completed before idle error. |
| T4 | SUFFICIENT | Execution-service assertion observes running item → root-finalized → completed item for a failed root with childTurnsContinue. Separate existing child test verifies no premature child settlement. These are focused boundary proofs, not a full-server ownership recording. |
| R1 | SUFFICIENT | Actual base and HEAD manifests identify exact revisions. Identical external fixture sends Missing Authentication header / -32000 at ACP line 12. Base first root completes at sequence 40 without an error item; HEAD fails at sequence 35 with persisted original message/code. |
| R2 | SUFFICIENT | HEAD none ACP line 12 omits error; failed projection contains Provider turn failed. / -32603 from the generic registry mapper. Synthetic test fallback null is a different flavor. |
| R3 | SUFFICIENT | HEAD details/none foreground native tool has stable item/run identity at sequences 20 running → 26 failed, before root terminal 35. Persisted first projections contain no running foreground command/dynamic tool. Base completes the same foreground tool. |
| R4 | SUFFICIENT (runtime N/A) | Generic external executable does not match an ownership-aware registry flavor and supplies neither synthetic extractor. Monitor/Subagent titles do not prove ownership; they are foreground here. T2/T4 cover the requested separate boundaries. |
| R5 | SUFFICIENT | Both HEAD error cases dispatch a second message after persisted first terminal. New root completes at sequence 68; a single providerSession, unchanged providerThread/native mock-session-1 and matching attempts prove reuse. Exactly one root terminal per run. |
| R6 | SUFFICIENT | Actual OpenCode 2.1.2 through acpRegistry on both exact revisions: model set_config_option requests/receipts select openai/gpt-6.1-sol, real ACP response says ACP smoke OK, end_turn, projection completed at sequence 32. Negotiates ACP v1: success compatibility only. Mock runtime/client test prove v2 error behavior. |
| Provenance/public artifacts | SUFFICIENT | Parsed every delivered final manifest, RPC/ACP/event JSONL row and JSON projection, checked semantics and contiguous stream sequences. Five fresh recordings contain 270 event rows, 83 ACP rows, 62 RPC rows and eight terminal projections. Verified 58 per-manifest artifact hashes, all 77 aggregate checksum entries, and all 80 published files byte-for-byte using Node fetch. Historical final-* captures excluded. |
| Own reproduction | SUFFICIENT | New empty home and project; unchanged working driver/proxy and external fixture; no-seed/T3CODE_DEV_SEED=0. All 68 ordered event semantic rows and both projection item/state summaries exactly match refresh-head-details after omitting random IDs/timestamps/paths. Native identities retained and independently checked within each recording. |
| PR body | SUFFICIENT | Runtime table agrees with captures, commit labels shortened, proof-audit/CI placeholders remain pending. Narrowed scope wording and linked historical summary; original description body preserved exactly after wrapper whitespace. |

Independent reproduction command: `node /tmp/ev-21229/capture-refresh.ts review-pass2-own-details details`, cwd `/home/ubuntu/wt/pr-21229`. Driver spawned actual dev server with an explicit new `/tmp/ev-21229/review-pass2-own-details/home`, `--no-seed`, and T3CODE_DEV_SEED=0. RPC requests generated all state; no fabricated terminal or SQL writes. First failure preserved Missing Authentication header / -32000, item running→failed precedes root failure, second root completed in native mock-session-1. Baseline comparison shows the intended semantic delta: same idle error previously produced completed root/foreground with no error item.

[Own event recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a607a6d5dd8eb395/events.jsonl), [first persisted projection](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27860a8a61d19262/projection-1.json), [follow-up projection](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cc9836342c64ef1c/projection-2.json), [manifest](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/da24e7493f015f90/manifest.json).

[Audit results](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b73f6d3cf2e3ded1/proof-audit-pass2-results.json), [80 public byte/hash comparisons](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1102a1b07b3588b2/proof-audit-public-hashes.json), [complete allowlisted artifacts, line ledger, assertions, drivers/proxy/fixture](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5edeb410bf0da952/proof-audit-pass2-artifacts.tar.gz).

Source audit: complete final seven-file diff inspected; stable patch ID 0f6edfa50e353758e958c19f3e312b97eaee5d42 matches the previous reviewed patch. The merge-base is the requested base. External fixture SHA256 3193949b5b59d7d2950d7a406378a8810126c0272ed4db9c89d8e4628140a429 equals final-head source. Besides error forwarding/result classification, the change settles only eligible foreground tools, flushes buffered command completion before failure, signals surviving background/child work and allows its late projection. The RPC-error catch path remains unchanged. The other changed files are the fixture and focused client/adapter/service tests; no generated schema, dependencies, contracts across clients, or render paths change. All seven files are listed in the final diff; no hidden UI scope.

Validation limits: inspected supplied final logs (212 scoped tests, two package typechecks plus separate server typecheck, lint with warnings), and exact final-head assertions. I did not rerun tests or run checks while my dev watcher was active. Existing original PR checks/reviews refer to contributor revisions, not replacement HEAD; replacement CI remains a lead-owned publication step. No browser/computer use, screenshots/diff images/viewports are applicable to this server-only change.

Isolation/cleanup: never accessed ~/.t3/userdata. No app source edits, commits, checkout, pushes, comments, watch or merge. Driver and providers recorded at spawn; cleanup addressed its own recorded processes only. All delivered and own recorded server/provider PIDs are gone. Branch remains takeover/pr-21229 at exact final HEAD with empty git status. Published allowlist excludes homes/databases/auth files. Effective settings contain no credentials; MCP config and startup links are redacted; credential-pattern scan of own published files found no values.

FRICTION: Python urllib returned HTTP 403 and curl could not resolve the artifact host; Node fetch successfully verified all 80 URLs and ghdrop upload -m succeeded. No capture recapture is required. Runtime R4 N/A and real ACP v1 success are deliberate, explicit proof boundaries. Two nonblocking PR-body wording fixes were made only in /tmp; original historical text is unchanged.

Reviewer: GPT-6.1 Sol through the Codex harness in T3 Code.

VERDICT: SUFFICIENT