# Pass2 proof audit verdict

**MERGE on scoped proof: SUFFICIENT (7/7 rows, no missing scoped rows).** No blocking code or proof finding for the PR-cache frame-detachment fix at [daf6e306](https://git.cafe/pingdotgg/t3code/commit/daf6e30653a135e15e7c3f7d8cda1a5f8369ddb5), against [f88b33a1](https://git.cafe/pingdotgg/t3code/commit/f88b33a16de988f86782343b348631d11432ddf2), for [#25267](https://git.cafe/pingdotgg/t3code/pulls/25267).

Findings first:

- Absolute-zero completed-sweep retention is unsupported: independently observed 0/1/1/1 after warmup/1/3/5 with zero active sweeps. The surviving first Map has a demonstrated SQLite prepared-statement cache retaining path. This is an independent remaining path, not a reason to expand this PR; its exclusivity and long-term bound were not proven.
- The scoped improvement is independently reproduced: same final test retains five Maps on base and fails; patched passes 8/8. Real server later four requested sweep Maps collect while ten PR request keys remain strongly reachable. The fresh, unresumed five-round run finished in about 44 seconds, avoiding the delivered run's long pause/TTL attribution ambiguity.
- Landing qualification: GitCafe still reports original head [e0a39360](https://github.com/bompus/t3code/commit/e0a39360d55d4533b4b06d00fe8a1c44500d54b0). Its 31 successful checks/reviews are not final-head certification. This audit does not authorize or perform publishing/merging. Publish the reviewed revision and obtain required revision-bound landing checks before merging; no additional scoped runtime evidence is missing.

| Evidence row | Status | Basis and limit |
|---|---|---|
| readCache.get retention | PASS | Exact same test: base actual 5/expected 0, exit 1; patched 8/8, exit 0. |
| invalidate / behavior | PASS | Seven existing guards pass both controls; real five invalidations/ten gets. |
| Reactor/service/filesystem | PASS, qualified | Independent real isolated server; five persisted updates plus drain; 0/1/1/1 Maps, active zero; SQLite survivor and ten resident keys confirmed by heap. Synthetic forge transport. |
| detachStackFrame helper | PASS | Helper unchanged; changed get/invalidate boundaries preserve surrounding behavior. |
| Other service callers | PASS, source scope | Shared boundary inspected; no mutation/other-entry-point runtime claim. |
| Surfaces / connections | PASS, applicability | Server-only two-file diff, no contract/client/provider-adapter change; no client/relay/tunnel claim. |
| Persistence / fallback / longevity | PASS, scoped | Real filesystem/SQLite plus existing behavior tests; no multi-hour/capacity/pruning/production stability claim. |

Identity: all seven delivered downloads match local public copies; all uploaded script manifest hashes verify; base source matches pinned base and final test matches checkout SHA256 7f643cb44feb2c2d9860afc0ec5e6cab2c0207fdba809d438dc19100b7a35d66. Independent scripts changed scratch paths only. Supplied check:changed pass inspected, not independently rerun. No source edits.

Owned runner/server descendants 1699368, 1699374, 1699402, 1699415, 1699450, 1699456 stopped and disappearance verified; driver 1700299 and heap reader exited; port closed. Fresh /tmp/ev-25267-audit removed after uploads. Clean pinned checkout preserved. No seed/live userdata, commits, pushes, comments, watch, merge, browser or images.

FRICTION: transport|urllib received 403; curl downloaded exact artifacts|use curl plus byte/hash verification.
FRICTION: runtime|ambient Node differs from vp-selected Node|record actual server Node v26.12.1.
FRICTION: attribution|remote head/checks lag local audited revision|require exact-head landing gates after publication.

Audited by GPT-6.1 Sol through Codex in T3 Code. Read-only proof audit; no independent reviewer delegation requested or performed.