# Agent capability evidence

AI-assisted; verified with the tests and tools listed above.

Environment for both recordings: Linux, each commit's real `vp run dev` server in its own worktree, a newly created worktree-local `.t3-proof` database, `T3CODE_DEV_SEED=0`, Codex provider, identical configured model selected privately, GNOME Terminal with dark colours and a 1366 × 890 capture. No application code was changed. No test suite supplies this evidence.

The driver creates two synthetic projects through the real server API. It enables Device support through `device.configure`, leaves global Agent device access off, and leaves global Agent browser access on. Through `server.updateSettings`, project A receives Agent device access on and Agent browser access off. Project B has no overrides and inherits the global settings.

1. Start a new Codex thread in project A and ask it to call `device_list` with `{}`.
2. Start a new Codex thread in project B and ask it to call `preview_status` with `{}`.
3. Retrieve each actual persisted tool call and response with `orchestration.getTurnItem`. The recordings show these records, not an agent's paraphrase.

Before: both calls fail with the corresponding access-disabled/capability-denied error.
After: device listing succeeds and returns the local host and platform availability (no local simulator installed); browser status succeeds and returns a normal no-open-tab status.

The same driver and fixture were used against fresh databases at the base and head. Pairing credentials and runtime provider metadata are retained only in private scratch output. Public responses redact filesystem locations. The original recordings are cropped only to the terminal rectangle; time and output are not reconstructed or replayed.

Reproduction (from each checkout, with the scripts together in a scratch directory):

```sh
T3CODE_DEV_SEED=0 vp run dev --home-dir "$PWD/.t3-proof"
# In another shell, select the same available model privately:
EVIDENCE_MODEL="$CHOSEN_MODEL" headless-desktop bash capture.sh before "$PWD"
# Use "after" for the head checkout.
```

`driver.mjs` also writes private configuration/projection files. Upload only files explicitly named `*-public.json` or `transcript-public.txt`, the driver, the capture script, this document, and reviewed recordings.