# Evidence index for [#33105](https://git.cafe/pingdotgg/t3code/pull/33105)

Captured **19 / 22 fixture rows**: E0–E8, S1–S7, L1, X1 and X2. W1–W3 remain **cannot-verify windows** because this is a Linux VM; no Windows runtime was attempted. All mandatory Linux captures in the auditor's matrix are present. X1/X2 are explicitly helper-level captures; they are not native spawn/tool claims. Head-only controls have no newly captured before result, as permitted by the matrix.

Environment: Linux 6.8.0-117-generic x86_64; Node v26.12.1; **Claude Code 2.1.321**, same installed executable on both revisions. Real native CLI startup used a synthetic API credential and a deliberately unreachable loopback API endpoint; system/init was observed before transport completion. The CLI was deliberately stopped after init. No successful model response or first-party authentication is claimed. No screenshots apply: this change has no UI render path.

Full before SHA: `4c361199f47f6ea32a2c14835df392640d0f7c63` ([4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63)). Full after SHA: `1bc13bddf86515d310344be3e7e4820a851fa1bb` ([1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb)). Each transcript records the full commit and claude --version. Server databases were newly created by each checkout with T3CODE_DEV_SEED=0 and an explicit scratch home. No live database was seeded or repaired, and no real rows were copied.

## Fixture matrix

| Row | Before (sha) | After (sha) | Transcript links |
|---|---|---|---|
| E0 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): absent; tools 3 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): 0; tools 0 | [runtime-callers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cdb8c0d6074e54cf/runtime-callers.md) |
| E1 | Head-only control requested | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=U I=0 → 0; tools 0 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E2 | Head-only control requested | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=U I=1 → 1; tools 3 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E3 | Head-only control requested | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=0 I=U → 0; tools 0 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E4 | Head-only equivalent control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=0 I=0 → 0; tools 0 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E5 | Head-only conflict control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=1 I=0 → 0; tools 0 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E6 | Head-only host-on control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=1 I=U → 1; tools 3 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E7 | Head-only conflict control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=0 I=1 → 1; tools 3 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| E8 | Head-only equivalent control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): H=1 I=1 → 1; tools 3 | [precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md) |
| S1 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): absent; tools 3 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): spawned 0; tools 3 (CLI pair and real head T3) | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S2 | Head-only control requested | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): spawned 1; settings env 0; tools 0 | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S3 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): absent; enableArtifact true; tools 3 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): 0; enableArtifact true; tools 0 | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S4 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): absent; enableArtifact false; tools 0 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): 0; enableArtifact false; tools 0 | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S5 | Head-only control requested | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): spawned 1; enableArtifact false; tools 0 | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S6 | Head-only equivalent control | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): spawned 1; enableArtifact true; tools 3 | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| S7 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): entrypoint sdk-ts; artifact absent; tools 0 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): entrypoint sdk-ts; artifact 0; tools 0 (real T3 pair) | [settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md) |
| L1 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): lower=1; upper absent; CLI tools 3 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): lower=1; upper 0; CLI tools 0 (real Linux helper pair plus CLI controls) | [linux-helper.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d60b867605c1a0f7/linux-helper.md) |
| W1 | cannot-verify windows | cannot-verify windows; existing focused unit passed | [windows-and-tests.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b7528c58e0b82cf/windows-and-tests.md) |
| W2 | cannot-verify windows | cannot-verify windows; no native runtime or dedicated W2 test | [windows-and-tests.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b7528c58e0b82cf/windows-and-tests.md) |
| W3 | cannot-verify windows | cannot-verify windows; generic branch source coverage only, not rerun | [windows-and-tests.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b7528c58e0b82cf/windows-and-tests.md) |
| X1 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): exact empty and unusual strings preserved (helper) | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): exact empty and unusual strings preserved (helper) | [linux-helper.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d60b867605c1a0f7/linux-helper.md) |
| X2 | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): own undefined property preserved (helper only) | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): own undefined property preserved (helper only) | [linux-helper.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d60b867605c1a0f7/linux-helper.md) |

## Production callers

| Row | Before (sha) | After (sha) | Transcript links |
|---|---|---|---|
| C1 session | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): t3-code, artifact absent, tools 3 | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): t3-code, artifact 0, tools 0 | [runtime-callers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cdb8c0d6074e54cf/runtime-callers.md) |
| C2 machine capability probe | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): artifact absent | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): artifact 0; control-init tool list is not expected | [runtime-callers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cdb8c0d6074e54cf/runtime-callers.md) |
| C3 title generation | [4c361199](https://git.cafe/pingdotgg/t3code/commit/4c361199f47f6ea32a2c14835df392640d0f7c63): artifact absent | [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb): artifact 0; JSON output and --tools restriction; no streaming tool-list claim | [runtime-callers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cdb8c0d6074e54cf/runtime-callers.md) |
| C4 auxiliary/outside scope | No additional minimum capture required by matrix | Not executed; not claimed as runtime-verified | Auditor's code-covered route; no new transcript |

## What else changed

- Revision metadata, before/after fixture labels, scratch run/home/project directory names, wrapper-record filenames, wrapper/parent/CLI PIDs, and synthetic project/thread/session identifiers differ. Session and model identifiers are removed from public output. Development ports also differ because each server derives or shifts its ports independently.
- The head default transcript includes an extra machine-probe refresh after restoring the default provider selection for C3; both probe records are shown. The base transcript has one such probe. C1 and C3 each have one selected default capture per side.
- Head-only precedence controls intentionally vary host and instance inputs; settings controls intentionally vary synthetic settings as named in each row. For each before/after settings pair, the settings variant is the same. Head-only rows do not imply an uncaptured baseline measurement.
- Within the authoritative paired captures, the other two whitelisted environment fields, CLI version, relevant argument summaries, synthetic settings, and exit/init-observed statuses match. C2 has no stream init by design; C3 ends after environment capture. For S7 both entrypoints are sdk-ts, and for L1 both lowercase values are 1.
- Exploratory attempts differ from the authoritative runs: nonessential-traffic suppression was initially set to 1 and later removed; one exploratory transport used the existing private hub authentication instead of the synthetic loopback setup; one used CLI 2.1.304. All are excluded from authoritative comparisons. Concurrent server-start port collisions and an early direct-CLI entrypoint-settings attempt are also excluded. Their filtered records are retained in [exploratory-attempts.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fd8167b768517c53/exploratory-attempts.md). The earlier 2.1.304 PR body's complete matrix is not newly verified here.

## Tests and limits

`vp test run apps/server/src/provider/Drivers/ClaudeHome.test.ts`: **5 passed**, at [1bc13bdd](https://git.cafe/pingdotgg/t3code/commit/1bc13bddf86515d310344be3e7e4820a851fa1bb). [windows-and-tests.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b7528c58e0b82cf/windows-and-tests.md) contains the actual test transcript. Tests supplement the runtime captures; they do not substitute for them. W1's platform-injected unit branch is covered. W2/W3 native behavior remains unverified; the generic Windows instance-conflict suite was not rerun.

No other required row remains unverified. Completed within the 90-minute budget. Before final reporting: every captured server PID and recorded wrapper/CLI PID was absent from /proc; the created base worktree was removed; git status --short in the requested head worktree was empty. Nothing was committed or pushed, and no PR comment was posted.

## Uploaded transcripts and scripts

The wrapper forwards stdout unchanged and publishes only the three permitted environment variables, argument-shape flags, process identifiers, synthetic settings and filtered Artifact init fields. Original stdout, server logs and RPC logs remain private. Public scripts take private selection/authentication inputs through EVIDENCE_MODEL and EVIDENCE_DEV_TOKEN; the ephemeral development credential was removed from their source before upload. Some orchestration scripts represent superseded exploratory phases; use the named authoritative captures above when judging results. Runtime model identifiers and real transport credentials are absent from the public files.

[runtime-callers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cdb8c0d6074e54cf/runtime-callers.md)
[precedence-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c083ccbbae6b046a/precedence-controls.md)
[settings-controls.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e968cc7a81bd79b/settings-controls.md)
[linux-helper.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d60b867605c1a0f7/linux-helper.md)
[windows-and-tests.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b7528c58e0b82cf/windows-and-tests.md)
[exploratory-attempts.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fd8167b768517c53/exploratory-attempts.md)
[claude-wrapper.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/68f39378035413e9/claude-wrapper.py)
[rpc-driver.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a2932b15cbe10cb6/rpc-driver.mjs)
[start-run.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7db8eed858245413/start-run.py)
[add-fixture.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a0d93fe512af3ff4/add-fixture.py)
[cli-controls.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00f42f7e0089b704/cli-controls.py)
[helper-driver.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/59dafdeda5f6c625/helper-driver.mjs)
[extra-controls.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b169c7f5a11a1274/extra-controls.py)
[final-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/23e790d0126dd557/final-captures.py)
[final-cli-matrix.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0edd872942027adf/final-cli-matrix.py)
[remaining-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a2ff90abc2839a7/remaining-captures.py)
[stop-servers.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bf20c88ceeb47b14/stop-servers.py)
[assemble-evidence.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2a4fb23883ae00d3/assemble-evidence.py)

[write-index.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62755a092be09d2e/write-index.py)

AI-assisted; verified with the tests and tools listed above.

FRICTION:
- infra | Nonessential-traffic suppression disabled Artifact advertisement; private hub-auth startup also advertised zero in a separate exploratory context | Use a clean startup control with normal feature flags and synthetic loopback transport before measuring the matrix.
- runbook | Concurrent same-worktree servers selected the same ports; an early driver could hit the already-ready server | Start host-control servers sequentially and require the target server's own Listening line before RPC.
- tool | The first title-generation RPC nested the command incorrectly; an attempted repeated capture hit an existing-workspace conflict | Use the contract's raw command envelope and a new timestamped fixture directory for each capture.
- tool | Web fetch could not retrieve the matrix; curl succeeded | Permit direct download of the supplied evidence document.