B1 retake — base APK 71ba6b374c0b0181130c0cc3b3d5aaa3387ada67; native fingerprint ed36a9cc9856c84a322bb71e6d67744f0a00877d.
Root A regenerated; installed only in Android User store (B1-root-present-final.png). New valid leaf with same endpoint/SAN semantics; same new root/leaf used by N1 and successful N1 head setup. No alternate route. Fresh credential created 01:44:59 UTC, submitted 01:45:20 UTC (well within 15-minute TTL). The same unchanged head backend served both APKs.
Narration / video checkpoints:
00:00 fresh Add environment form, private HTTPS origin, code redacted.
~00:01 submit. 00:03 mobile network error; server TLS alert at 01:45:22.152 UTC, before any HTTP discovery/token/ticket or WSS request.
~00:21 expand sheet. 00:24–00:27 (and onward) complete error text is unobstructed above the gesture bar. Read final line: .41:18443/.well-known/t3/environment)).
One contiguous recording; status bar top 80 px masked, pairing code masked on all 927 exported frames; three-second final frame hold. No successful environment sync. No source changes.

Redaction: no request queries, headers, pairing codes, tokens, credentials, cookies or message payloads. TLS alerts are server observations of client trust abort. UTC and video time are correlated approximately; Android screenrecord uses variable presentation timing.

DEVICE ACTIONS (UTC):
{"time": "2026-10-28T01:45:19.129802+00:00", "step": "B1-record-start", "phase": "start"}
{"time": "2026-10-28T01:45:20.353516+00:00", "step": "B1-record-start", "phase": "end", "status": 0}
{"time": "2026-10-28T01:45:20.718482+00:00", "step": "B1-submit", "phase": "start"}
{"time": "2026-10-28T01:45:23.651486+00:00", "step": "B1-submit", "phase": "end", "status": 0}
{"time": "2026-10-28T01:45:39.932879+00:00", "step": "B1-expand-sheet", "phase": "start"}
{"time": "2026-10-28T01:45:42.613140+00:00", "step": "B1-expand-sheet", "phase": "end", "status": 0}
{"time": "2026-10-28T01:46:00.624956+00:00", "step": "B1-record-stop", "phase": "start"}
{"time": "2026-10-28T01:46:03.810771+00:00", "step": "B1-record-stop", "phase": "end", "status": 0}

PROTOCOL MILESTONES (UTC):
{"time": "2026-10-28T01:45:22.152Z", "type": "TLS_REJECT", "label": "private-ca", "code": "ERR_SSL_SSL/TLS_ALERT_CERTIFICATE_UNKNOWN", "message": "C0040233177F0000:error:0A000416:SSL routines:ssl3_read_bytes:ssl/tls alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:918:SSL alert number 46 ", "source": "private TLS proxy"}