# Final native evidence — issue 8341

Final head [248ab74fbd](https://git.cafe/pingdotgg/t3code/commit/248ab74fbdb6f5c8660110f9bdef17fa5c721532), final base [ee33c4c65d](https://git.cafe/pingdotgg/t3code/commit/ee33c4c65dfde09564c2c9f9da4ffdf53828cb15). Original RED/before base remains [3b95e7831b](https://git.cafe/pingdotgg/t3code/commit/3b95e7831b); those artifacts were reused unchanged, not rerun or relabeled at the final base. Full final diff has four files: implementation, test, committed native fixture, and one-line Knip fixture entry. No tracked edits by test subagent. No push, forge write, PR or browser automation.

## Immutable evidence

- [Final pinned Electron results](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1b4e39e9efbc9709/final-native-results.json)
- [Final pinned Electron transcript with exact runner and owned exits](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c1867f78c55f5929/final-native-transcript.txt)
- [Original RED test](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00c34169f58d372b/red-tests.txt)
- [Original before runtime transcript](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ea94fb9f77202df3/before-transcript.txt)
- [Prior corrected index with original GREEN, provenance, friction and fixtures](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/be459d5f02fcf8f5/8341-evidence-index.md)

Only the pinned 44.9.3 artifacts above are final native runtime evidence. Earlier refresh using root Electron 44.4.5 is superseded; retained locally under /tmp/8341-proof-superseded-44.4.5. Original /tmp/8341-proof-v2 was not overwritten. Selected assertion lines and synthetic hashes were inspected before ghdrop upload; raw runtime logs, profiles, keyrings, credentials and generated server secrets were not uploaded.

## Results and scope

PASS: real Electron 44.9.3 Linux x64, gnome_libsecret, encryption available, actual renderer preload/IPC path. Fresh isolated /tmp/8341-proof-final home, same v10 followed by Q64 synthetic ciphertext. First get returns null; active source remains byte-identical before save; repeated and concurrent gets return null with exactly one backup. Save returns true and writes an encrypted envelope. Actual safeStorage decrypt equals the exact saved synthetic string. A separate fresh Electron process reloads it, retaining one backup with the same file/ciphertext hashes. Both owned launcher PIDs were waited and exited 0; no listener remains at 15005. Lead-owned Vite 6964/server 15004 were left running. Working tree clean.

Source file SHA256: 98d5a39880c052e085446645e21dd477ae51a861203a708daaf0ee432cd1eaec.
Backup file SHA256: 377a00f6edb4c7978942b9c8a5bb74f68cd67a4bbe618ee4c1793d3e9c6bf437.
Both decoded ciphertext SHA256: 1f58098ddbbb03daefeec4ec1e504981a0836a512168bc9f66f45f4f011f7e0a.
Raw bytes are unequal because source JSON is pretty printed and backup JSON is normalized with trailing newline. Ciphertext strings and decoded ciphertext are equal. No byte-exact arbitrary JSON archival claim.

Build: dependency install completed exit 0 before `cd apps/desktop && vp pack` completed exit 0 at [5db949bbb4](https://git.cafe/pingdotgg/t3code/commit/5db949bbb45b7af6f7a11e9c37b1ea8d7ae939f8). The only subsequent change is the Knip entry; source/tests/fixture and built bundle are unchanged. Source-map store content equals tracked final store (SHA256 673c133d03cad446f34be4e304ae1c6c65f8e88aed338e28fbbc62adaa08a68e).
Main bundle SHA256: df1a5e5c5df7448c8d26dd2afbdf45d3cd53314ace55786755f30934336f34c8.
Pinned worktree Electron 44.9.3 binary SHA256: 7b7916ef94fa3380de130f8f1bff79fb339b9caafe134cd9dcb52d83b39ed299.

Lead final check:changed log reports seven tests passing, plus format/lint/typecheck passing. Knip initially flagged the standalone fixture; final config-only commit registers it and lead owns its focused rerun. This subagent did not duplicate tests. Original RED is a base-module isolation test with the recovery test from head and other dependencies from checkout, not a complete historical checkout. Backup-preservation failure is deterministic unit-test coverage only and was not independently discriminating RED; no native filesystem failure injection claimed.

UNVERIFIED: native Windows DPAPI/Local State/profile reset and macOS Keychain reset. Linux synthetic undecryptable ciphertext exercises the shared branch only. Also not demonstrated: actual settings/reconnect UI or account-backed remote connection. Native encryption-path proof is not a cryptographic audit.

Visual matrix has ZERO rows: changed behavior is native persistence and nonvisual IPC; no renderer/layout/navigation changes. No screenshot, capture, or recording was needed or taken. Web/mobile do not execute this store; local/remote/relay/tunnel target selection does not alter native host encryption. Historical proof-matrix gaps about raw-byte mismatch and fresh-process reload are resolved as qualified above; native OS lifecycle limitations remain.

## Friction

category|happened|prevention
---|---|---
Evidence semantics|Original byte check failed on normalized JSON|Retain source/backup hashes and assert ciphertext equality separately
Fixture consistency|Early observer used a different synthetic seed|Final run uses exact v10+Q64; exclude differing-seed captures
Test launcher|vp rejected disposable workspace|Use installed Vitest entrypoint and isolated config for historical RED
Native platforms|Windows/macOS lifecycle unavailable|Explicitly qualify Linux branch evidence; use disposable native profiles for lifecycle follow-up
Fixture lint|process.platform was rejected previously|Committed fixture uses node:os; lead targeted lint passes
Dependency readiness|Final main merge required dependency refresh|Wait successful frozen install before build/run
Runtime provenance|Initial refresh used previously requested root Electron 44.4.5 despite new 44.9.3 pin|Resolve worktree pin and binary hash; rerun final in a fresh home on installed 44.9.3
Knip|Standalone committed fixture appeared unused|Lead registers it explicitly in Knip entry configuration
Artifact lookup|Prior index absent from /tmp root|Read supplied immutable index URL and retain a local copy