# PASS 2 proof audit

Scope: [#22661](https://git.cafe/pingdotgg/t3code/pull/22661), only [#22656](https://git.cafe/pingdotgg/t3code/issues/22656). Head [b2c65dcc8a](https://git.cafe/pingdotgg/t3code/commit/b2c65dcc8a92f1e97fa5ef235419d2e00ed07fca), base [4f651cb10d](https://git.cafe/pingdotgg/t3code/commit/4f651cb10d2a885be82748e22a280eeef591200f). Worktree HEAD and live GitCafe PR head verified. Read-only source/forge inspection; no source changes, tests added, browser, server startup, rollback mutation, or forge writes. Parent servers untouched. App-owned PR registration succeeded using explicit host/repository/number after URL-form registration was rejected.

Findings: no blocking evidence contradiction remains. The delivered index is an earlier snapshot: its pending R1 boundary and prior-head R2 execution are explicitly superseded in the current PR description by supplemental exact-head results. Do not interpret the index alone as final. Multi-page pagination, guard variants, other platforms, file restoration, and nonzero checkpoints remain explicitly unexecuted; source review supports the limited unchanged-behavior claims, not experimental coverage.

Independent reproduction: used the delivered capture.mjs with only output directory redirected and live-HTTP section omitted, retaining its exact production imports, fixture construction, byte-to-git verification, and decoder execution. Node v24.21.0/Linux; bundled client 2.0.28. Command `node /tmp/issue-22656-pass2-recapture/capture-offline.mjs`, exit 0. All 52 before/after replay records matched delivered revision, module/fixture hash, HTTP status, exit status, decoded value, requests, and structured errorDetails. Semantic delta: zero, including N1 original five-message natural-compaction fixture and L1 90-message fixture. No pixel metric applies: zero changed UI/render paths. All available manifest-listed files matched SHA256. Source hashes match base/head: 22f09e55d95dd076520984703147536dbf28c77a0a424688134b1561a8ca5add / 366cb2773253f64e70b612c6aa09252d6d9b58e8d0cc764f8b090b11152e593e.

| Row | Status | Evidence / qualification |
| --- | --- | --- |
| N1 | Sufficient, executed | Actual HTTP base failure/head success; original natural five-message replay independently identical. IDs/order/cursor preserved. |
| N2 | Sufficient, executed | Running/completed keepID variants replay identically; empty fallback, no copying keepID. |
| N3 | Sufficient, executed | Running/completed absent metadata replay identically; real completed native fixture also covered. |
| L1 | Sufficient, executed | Actual base/head HTTP and independent 90-message replay; exact legacy recent lifted. |
| L2 | Sufficient, executed | Four running/completed empty/nonempty legacy-string replay pairs match. |
| P1 | Sufficient, executed + source review | Both statuses retain top-level string over conflict; metadata-absent variant follows unchanged present-property branch. |
| V1 | Sufficient, executed | Number/null/object remain downstream schema errors despite fallback. |
| V2 | Sufficient, partial execution + source review | Invalid reason/status/missing ID retain failures; remaining required-field/noncompaction cases still reach original generated schema. |
| M1 | Sufficient, partial execution + source review | Numeric metadata recent falls back empty; null metadata still rejected downstream. Remaining non-object variants use same predicate, without claiming runtime coverage. |
| U1 | Sufficient, partial execution + source review | Empty/ordinary synthetic replay unchanged. Native retained history includes user/assistant/idle/system/location records; status/type predicate excludes unrelated variants. |
| U2 | Sufficient, limited execution + source review | IDs/order/count/full cursor preserved in delivered assertions and replay. Existing pagination implementation unchanged; no multi-page execution claimed. |
| G1 | Sufficient, source review + auth test evidence | GET/status/URL early returns preserve original response; error yields propagate. Other guard variants not claimed executed. |
| G2 | Sufficient, partial execution + source review | Non-array data/malformed cursor retain errors; malformed JSON/missing data return cached original response for generated decoder. |
| H1 | Sufficient, source review | Response reconstruction removes content-length and spreads remaining headers/status; no experimental transformed-header assertion claimed. |
| R1 | Sufficient, real app + supplemental boundary | Exact-head succeeded outbox, attempt 1, no last_error, matching stage/commit; original five IDs independently match retained first five, no new T3 users; runs 1/2 rolled_back. |
| R2 | Sufficient, real app + supplemental boundary | Exact-head outbox succeeds first attempt at 06:45:23; matching stage/commit; runs 1/2/3 rolled_back. Additional read-only actual HTTP independently matches all 93 supplemental retained IDs, first 89 synthetic contents, original legacy compaction metadata, and no new T3 users. |

Legacy clarification: HTTP decoder fixture uses msg_repro IDs, while T3-imported rollback session has server-valid regenerated IDs. These are distinct fixture instances, not byte-identical sessions. Read-only GET of the imported session verified its 93 IDs exactly match the supplemental boundary result, with completed legacy compaction and metadata.recent=msg_repro088. No cross-session ID identity is claimed.

Nine passing focused tests and 30 passing semantic assertions are supported by delivered exact-head logs/hash manifest. This auditor reran the capture, not the test suite, lint, or typecheck; lint/typecheck success remains the parent's supplied validation statement. No repo-wide checks performed. Current PR description contains corrected native/legacy/missing-recent claims and explicitly supersedes stale index gaps. This is a proof-sufficiency audit, not a new merge authorization or CI certification.

Evidence: [matrix](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c01608d1db1cf5c1/issue-22656-proof-pass1.md), [delivered index](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bb0e5a1c1b038c64/index.md), [native boundary](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05741c8e96f87e5e/native-boundary-proof.json), [native completion](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/917f987900325dc1/native-dev-rollback.log), [legacy completion/boundary](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f0184d90483ee05d/legacy-final-head-rollback.json), [legacy provider revert](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/938789edc29957ef/legacy-final-head-revert.log).

VERDICT: SUFFICIENT