Service ownership recovery evidence

Environment: Linux, real bundled T3 CLI, systemd user service, fresh isolated T3 home per run, no seeded data.
Both bundles were built from their own commit using vp run build:bundle.

Driver usage: python3 driver.py before CHECKOUT PORT
              python3 driver.py after CHECKOUT PORT
The driver creates a runtime shim which execs the checkout bundle with the original IPC descriptor intact, starts a competing real server, verifies another server exits 78, starts a transient user service with the production __service-launcher, stops the competitor, then observes child count and the public environment descriptor HTTP endpoint every five seconds for eighty seconds. Restart=no ensures systemd cannot mask launcher behavior.

Videos are 1x timestamped replays of captured CLI observations, rendered by render.py from events.json. They are not desktop screen recordings. PNGs show the final captured command output. Only synthetic state and sanitized observations are published.

The competing server is started directly rather than through desktop SSH. Desktop connection setup and authenticated client reconnection are outside this capture.
AI-assisted; verified with the tests and tools listed above.