U1 — real Android app; captured 2026-10-28 UTC
Head APK, original root A reinstalled in user store. Private route 1 of 1; backend loopback binding advertises no alternate routes. Initial WSS generation 4. CONTROL_DROP destroys existing upgraded sockets and returns HTTP 503. Synthetic authenticated localhost driver renames project while offline. CONTROL_RESTORE uses same listener and certificate. New ticket and WSS generation 5 plus shell HTTP 200; app displays renamed project automatically, without Retry being pressed.

Redaction: no query strings, headers, tokens, pairing codes or message payloads. TLS errors are observed at the server after the client aborts trust validation. Method/path/status retained; WS generations are proxy-local identifiers. Canary RPC responses contain synthetic data only.

{"time": "2026-10-28T00:54:56.145Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:56.162Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:56.317Z", "type": "HTTP", "label": "private-ca", "method": "POST", "path": "/oauth/token", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:57.805Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.029Z", "type": "HTTP", "label": "private-ca", "method": "POST", "path": "/api/auth/websocket-ticket/rpc", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.168Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.275Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.426Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.453Z", "type": "WS_UPGRADE", "label": "private-ca", "path": "/ws", "status": 101, "generation": 4, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.482Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.916Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.930Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:54:58.972Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/orchestration/shell", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:34.570Z", "type": "CONTROL_DROP", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:34.573Z", "type": "WS_CLOSE", "label": "private-ca", "generation": 4, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:36.652Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:36.653Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 503, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:39.782Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 503, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:44.809Z", "operation": "rename", "result": {"_tag": "Exit", "requestId": "53d6ab10-d472-442e-baf4-21da8c5a5139", "exit": {"_tag": "Success", "value": {"id": "android-ca-proof", "title": "Android CA proof — Reconnected", "workspaceRoot": "/tmp/lead-25730-r1/evidence/synthetic-project", "repositoryIdentity": null, "faviconPath": null, "projectIcon": null, "defaultModelSelection": null, "defaultThreadEnvMode": null, "autoPull": false, "scripts": [], "createdAt": "2026-10-28T00:26:23.590Z", "updatedAt": "2026-10-28T00:55:44.797Z", "deletedAt": null}}}, "source": "authenticated-localhost-seed-driver"}
{"time": "2026-10-28T00:55:44.892Z", "type": "CONTROL_RESTORE", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.364Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.377Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.428Z", "type": "HTTP", "label": "private-ca", "method": "POST", "path": "/api/auth/websocket-ticket/rpc", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.466Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/.well-known/t3/environment", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.523Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.532Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.550Z", "type": "WS_UPGRADE", "label": "private-ca", "path": "/ws", "status": 101, "generation": 5, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:47.590Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:48.001Z", "type": "TLS_ACCEPT", "label": "private-ca", "protocol": "TLSv1.3", "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:48.012Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/auth/session", "status": 200, "source": "TLS-proxy"}
{"time": "2026-10-28T00:55:48.014Z", "type": "HTTP", "label": "private-ca", "method": "GET", "path": "/api/orchestration/shell", "status": 200, "source": "TLS-proxy"}