# Evidence ledger for [#9232](https://git.cafe/pingdotgg/t3code/pulls/9232)

Before: [5a969c17e7](https://github.com/pingdotgg/t3code/commit/5a969c17e76301e45e53e1fd9aad2f5b4599d865), exact SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`.
After: [7217838f9d](https://github.com/pingdotgg/t3code/commit/7217838f9df38b550b19a554bb5d3a57197d851b), exact SHA `7217838f9df38b550b19a554bb5d3a57197d851b`, replacement `takeover/pr-9232`.

20/20 runtime captures passed. Six of eight matrix rows covered: L1–L5 through complete standalone servers and actual Electron local backends; H1 through focused assertions and both caller suites. M1 native macOS launchctl and W1 native Windows remain unverified on Linux; their existing plumbing is unchanged.

Environment: Ubuntu 24.04.5 LTS, Linux 6.1.102 x86_64 (`fs-06`), Node 26.12.1, Electron 44.9.3. Electron ran under headless-desktop/Xvfb with the explicitly authorized `--no-sandbox --disable-gpu`; ffmpeg x11grab recorded actual X displays. Native preview handled the first standalone pairing/refresh; Playwright CDP drove only actual Electron renderers. Standalone remaining rows used ordinary pairing/browser-session cookies and real typed RPC routes. No provider response, DOM state, or installed/version flag was mocked.

The Claude fixture only implements a version response. Unknown authentication and the unsupported-version warning are expected. No provider login or agent turn was initiated.

## Findings

| Row | Before → after, both startup paths | Evidence |
|---|---|---|
| L1 failed probe | absent → H-only CLI v2.1.0; command-v exit 1 → 0 | refresh results, marker logs, PATH/terminal, Settings stills, recordings |
| L2 empty probe; B absent/U file | absent → only H appended; nonexistent inherited entry retained | namespace directory manifest, refresh, terminal, stills |
| L3 JAVA_HOME-only output | inherited toolchain v2.1.1 wins both; head appends only missing brew | refresh, markers, exact dedupe/order, stills, recordings |
| L4 successful PATH probe | probe CLI v2.1.2 wins both; no fallback additions | refresh, markers, exact PATH, stills, recordings |
| L5 PATH unset; all fallback dirs absent | CLI absent both; no empty/current-directory segment | namespace manifest, refresh, terminal, stills |
| H1 | 326 focused real filesystem assertions, Linux/darwin platform injection; 61 suite tests passed, 2 existing skips | test logs and scripts |

Standalone terminals include their existing managed Node runtime directory. L4 places successful probe entries before it. The oracle removes that unrelated directory before comparing hydration order. Desktop L5 leaves the parent PATH unset; interactive Bash supplies its normal default PATH (without an empty segment or `.`). This is unchanged before/after. Empty-string and unset merge boundaries are separately covered by H1. Desktop does not request JAVA_HOME; that unchanged difference from the standalone probe is preserved.

## Per-capture environment and results

### before L1 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L1/S`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:26:11.374Z`; shell probe exit `17`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L1/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L1/S/data/vite-plus/js_runtime/node/26.12.1/bin:/usr/bin:/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L1/S` in the scripts/stubs/logs archive.

### before L1 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L1/D`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:34:54.329Z`; shell probe exit `17`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L1/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/usr/bin:/bin`.

Before — L1 settings
![before-L1-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc6557a150f6f05f/before-L1-settings.png)

Before — L1 terminal
![before-L1-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5c2e33d933b77e55/before-L1-terminal.png)

[before-L1-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/488907e41386f4d1/before-L1-flow.mp4)
[L1-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/deda9901b88bc072/L1-settings-absolute-diff.png)
[L1-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14dd69eb549d240e/L1-settings-changed-pixel-mask.png)
[L1-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/89b513e26aae27a9/L1-terminal-absolute-diff.png)
[L1-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2819a2e843a99ca3/L1-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L1/D` in the scripts/stubs/logs archive.

### before L2 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L2/S`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:26:38.209Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/before/L2/S/home/.local/bin": "directory", "/usr/local/bin": "file"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L2/S/data/vite-plus/js_runtime/node/26.12.1/bin:/intentionally-nonexistent-9232:/usr/bin:/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L2/S` in the scripts/stubs/logs archive.

### before L2 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L2/D`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:35:07.308Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/before/L2/D/home/.local/bin": "directory", "/usr/local/bin": "file"}`.
Exact terminal PATH: `/intentionally-nonexistent-9232:/usr/bin:/bin`.

Before — L2 settings
![before-L2-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/34340662ecacc615/before-L2-settings.png)

Before — L2 terminal
![before-L2-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6a1b476528844a94/before-L2-terminal.png)
[L2-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/625db61990d27d81/L2-settings-absolute-diff.png)
[L2-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5914d31d370f7f6/L2-settings-changed-pixel-mask.png)
[L2-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e77070a18ce35728/L2-terminal-absolute-diff.png)
[L2-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05f4469ecf27c6fe/L2-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L2/D` in the scripts/stubs/logs archive.

### before L3 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L3/S`.
Fresh provider result: installed=`true`, version=`2.1.1`, checkedAt=`2026-10-25T00:27:40.829Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L3/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L3/S/data/vite-plus/js_runtime/node/26.12.1/bin:/tmp/ev-9232/runs/before/L3/S/toolchain:/usr/local/bin:/tmp/ev-9232/runs/before/L3/S/home/.local/bin:/usr/bin:/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L3/S` in the scripts/stubs/logs archive.

### before L3 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L3/D`.
Fresh provider result: installed=`true`, version=`2.1.1`, checkedAt=`2026-10-25T00:35:20.109Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L3/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L3/D/toolchain:/usr/local/bin:/tmp/ev-9232/runs/before/L3/D/home/.local/bin:/usr/bin:/bin`.

Before — L3 settings
![before-L3-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/92336cce7e7d0a20/before-L3-settings.png)

Before — L3 terminal
![before-L3-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8467daf1c33198ec/before-L3-terminal.png)

[before-L3-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/db712321272784f7/before-L3-flow.mp4)
[L3-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c8328c54b9fd74c/L3-settings-absolute-diff.png)
[L3-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/feb29bb6b926ab2d/L3-settings-changed-pixel-mask.png)
[L3-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c17c8beb06ba66f1/L3-terminal-absolute-diff.png)
[L3-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c704cd363747559/L3-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L3/D` in the scripts/stubs/logs archive.

### before L4 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L4/S`.
Fresh provider result: installed=`true`, version=`2.1.2`, checkedAt=`2026-10-25T00:27:40.840Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L4/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L4/S/probe-bin:/usr/bin:/bin:/tmp/ev-9232/runs/before/L4/S/data/vite-plus/js_runtime/node/26.12.1/bin:/tmp/ev-9232/runs/before/L4/S/toolchain`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L4/S` in the scripts/stubs/logs archive.

### before L4 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L4/D`.
Fresh provider result: installed=`true`, version=`2.1.2`, checkedAt=`2026-10-25T00:35:34.721Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/before/L4/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L4/D/probe-bin:/usr/bin:/bin:/tmp/ev-9232/runs/before/L4/D/toolchain`.

Before — L4 settings
![before-L4-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/67b47e861db43095/before-L4-settings.png)

Before — L4 terminal
![before-L4-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ebbbcbe37aad8689/before-L4-terminal.png)

[before-L4-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9308d7395db493df/before-L4-flow.mp4)
[L4-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/18d0466c08380183/L4-settings-absolute-diff.png)
[L4-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9485acd71034ea9b/L4-settings-changed-pixel-mask.png)
[L4-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6218a5654d0be561/L4-terminal-absolute-diff.png)
[L4-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e4fed0e6010c447e/L4-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L4/D` in the scripts/stubs/logs archive.

### before L5 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L5/S`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:27:41.805Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/before/L5/S/home/.local/bin": "absent", "/usr/local/bin": "absent"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/before/L5/S/data/vite-plus/js_runtime/node/26.12.1/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L5/S` in the scripts/stubs/logs archive.

### before L5 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `5a969c17e76301e45e53e1fd9aad2f5b4599d865`; private HOME/T3/XDG and private mount namespace; fixture `runs/before/L5/D`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:35:47.362Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/before/L5/D/home/.local/bin": "absent", "/usr/local/bin": "absent"}`.
Exact terminal PATH: `/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`.
interactive Bash supplies its existing default PATH when parent PATH is unset

Before — L5 settings
![before-L5-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6e7fa6054df92f09/before-L5-settings.png)

Before — L5 terminal
![before-L5-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/638ce94a523199c8/before-L5-terminal.png)
[L5-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9775b2a6a9142a70/L5-settings-absolute-diff.png)
[L5-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7cb60f6c8a35a46e/L5-settings-changed-pixel-mask.png)
[L5-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/53c7e952a837eb33/L5-terminal-absolute-diff.png)
[L5-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/de96958979005867/L5-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/before/L5/D` in the scripts/stubs/logs archive.

### after L1 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L1/S`.
Fresh provider result: installed=`true`, version=`2.1.0`, checkedAt=`2026-10-25T00:23:11.106Z`; shell probe exit `17`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L1/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L1/S/data/vite-plus/js_runtime/node/26.12.1/bin:/usr/bin:/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/bin:/tmp/ev-9232/runs/after/L1/S/home/.local/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L1/S` in the scripts/stubs/logs archive.

### after L1 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L1/D`.
Fresh provider result: installed=`true`, version=`2.1.0`, checkedAt=`2026-10-25T00:34:54.598Z`; shell probe exit `17`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L1/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/usr/bin:/bin:/home/linuxbrew/.linuxbrew/bin:/usr/local/bin:/tmp/ev-9232/runs/after/L1/D/home/.local/bin`.

After — L1 settings
![after-L1-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5d72d9b70ba91e7d/after-L1-settings.png)

After — L1 terminal
![after-L1-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a6105d91a865ed56/after-L1-terminal.png)

[after-L1-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f60cac292a1cb53c/after-L1-flow.mp4)
[L1-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/deda9901b88bc072/L1-settings-absolute-diff.png)
[L1-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14dd69eb549d240e/L1-settings-changed-pixel-mask.png)
[L1-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/89b513e26aae27a9/L1-terminal-absolute-diff.png)
[L1-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2819a2e843a99ca3/L1-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L1/D` in the scripts/stubs/logs archive.

### after L2 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L2/S`.
Fresh provider result: installed=`true`, version=`2.1.0`, checkedAt=`2026-10-25T00:26:37.364Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/after/L2/S/home/.local/bin": "directory", "/usr/local/bin": "file"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L2/S/data/vite-plus/js_runtime/node/26.12.1/bin:/intentionally-nonexistent-9232:/usr/bin:/bin:/tmp/ev-9232/runs/after/L2/S/home/.local/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L2/S` in the scripts/stubs/logs archive.

### after L2 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L2/D`.
Fresh provider result: installed=`true`, version=`2.1.0`, checkedAt=`2026-10-25T00:35:07.677Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/after/L2/D/home/.local/bin": "directory", "/usr/local/bin": "file"}`.
Exact terminal PATH: `/intentionally-nonexistent-9232:/usr/bin:/bin:/tmp/ev-9232/runs/after/L2/D/home/.local/bin`.

After — L2 settings
![after-L2-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/425544487235f419/after-L2-settings.png)

After — L2 terminal
![after-L2-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/613f1e16d864de1a/after-L2-terminal.png)
[L2-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/625db61990d27d81/L2-settings-absolute-diff.png)
[L2-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5914d31d370f7f6/L2-settings-changed-pixel-mask.png)
[L2-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e77070a18ce35728/L2-terminal-absolute-diff.png)
[L2-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05f4469ecf27c6fe/L2-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L2/D` in the scripts/stubs/logs archive.

### after L3 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L3/S`.
Fresh provider result: installed=`true`, version=`2.1.1`, checkedAt=`2026-10-25T00:27:40.857Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L3/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L3/S/data/vite-plus/js_runtime/node/26.12.1/bin:/tmp/ev-9232/runs/after/L3/S/toolchain:/usr/local/bin:/tmp/ev-9232/runs/after/L3/S/home/.local/bin:/usr/bin:/bin:/home/linuxbrew/.linuxbrew/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L3/S` in the scripts/stubs/logs archive.

### after L3 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L3/D`.
Fresh provider result: installed=`true`, version=`2.1.1`, checkedAt=`2026-10-25T00:35:20.184Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L3/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L3/D/toolchain:/usr/local/bin:/tmp/ev-9232/runs/after/L3/D/home/.local/bin:/usr/bin:/bin:/home/linuxbrew/.linuxbrew/bin`.

After — L3 settings
![after-L3-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/022e52e6ef672210/after-L3-settings.png)

After — L3 terminal
![after-L3-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/133dc890ad6fa0ad/after-L3-terminal.png)

[after-L3-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/35df58c64afd28db/after-L3-flow.mp4)
[L3-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c8328c54b9fd74c/L3-settings-absolute-diff.png)
[L3-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/feb29bb6b926ab2d/L3-settings-changed-pixel-mask.png)
[L3-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c17c8beb06ba66f1/L3-terminal-absolute-diff.png)
[L3-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c704cd363747559/L3-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L3/D` in the scripts/stubs/logs archive.

### after L4 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L4/S`.
Fresh provider result: installed=`true`, version=`2.1.2`, checkedAt=`2026-10-25T00:27:40.881Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L4/S/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L4/S/probe-bin:/usr/bin:/bin:/tmp/ev-9232/runs/after/L4/S/data/vite-plus/js_runtime/node/26.12.1/bin:/tmp/ev-9232/runs/after/L4/S/toolchain`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L4/S` in the scripts/stubs/logs archive.

### after L4 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L4/D`.
Fresh provider result: installed=`true`, version=`2.1.2`, checkedAt=`2026-10-25T00:35:34.589Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "directory", "/tmp/ev-9232/runs/after/L4/D/home/.local/bin": "directory", "/usr/local/bin": "directory"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L4/D/probe-bin:/usr/bin:/bin:/tmp/ev-9232/runs/after/L4/D/toolchain`.

After — L4 settings
![after-L4-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/10b7c079281e698d/after-L4-settings.png)

After — L4 terminal
![after-L4-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c96988918a70266c/after-L4-terminal.png)

[after-L4-flow.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4c556739e75582ab/after-L4-flow.mp4)
[L4-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/18d0466c08380183/L4-settings-absolute-diff.png)
[L4-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9485acd71034ea9b/L4-settings-changed-pixel-mask.png)
[L4-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6218a5654d0be561/L4-terminal-absolute-diff.png)
[L4-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e4fed0e6010c447e/L4-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L4/D` in the scripts/stubs/logs archive.

### after L5 S — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Node 26.12.1 full standalone server; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L5/S`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:27:41.637Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/after/L5/S/home/.local/bin": "absent", "/usr/local/bin": "absent"}`.
Exact terminal PATH: `/tmp/ev-9232/runs/after/L5/S/data/vite-plus/js_runtime/node/26.12.1/bin`.
standalone terminal includes its existing managed Node directory

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L5/S` in the scripts/stubs/logs archive.

### after L5 D — PASS

Environment: Ubuntu 24.04.5 / Linux 6.1.102 x86_64; Electron 44.9.3 and its own local backend, headless-desktop/Xvfb; SHA `7217838f9df38b550b19a554bb5d3a57197d851b`; private HOME/T3/XDG and private mount namespace; fixture `runs/after/L5/D`.
Fresh provider result: installed=`false`, version=`None`, checkedAt=`2026-10-25T00:35:48.165Z`; shell probe exit `0`.
Filesystem manifest: `{"/home/linuxbrew/.linuxbrew/bin": "absent", "/tmp/ev-9232/runs/after/L5/D/home/.local/bin": "absent", "/usr/local/bin": "absent"}`.
Exact terminal PATH: `/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`.
interactive Bash supplies its existing default PATH when parent PATH is unset

After — L5 settings
![after-L5-settings.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/70aefdfbe3d89721/after-L5-settings.png)

After — L5 terminal
![after-L5-terminal.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3f696e5c80c85075/after-L5-terminal.png)
[L5-settings-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9775b2a6a9142a70/L5-settings-absolute-diff.png)
[L5-settings-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7cb60f6c8a35a46e/L5-settings-changed-pixel-mask.png)
[L5-terminal-absolute-diff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/53c7e952a837eb33/L5-terminal-absolute-diff.png)
[L5-terminal-changed-pixel-mask.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/de96958979005867/L5-terminal-changed-pixel-mask.png)

Logs, scripts, preflight, marker invocations, provider JSON/RPC frames, and transcript: `runs/after/L5/D` in the scripts/stubs/logs archive.

## Isolation caveat and superseded artifacts

Earlier desktop launches sanitized app/backend HOME only after starting headless-desktop. Its keyring helper inherited the host HOME. The host `login.keyring` mtime was observed at 00:30:02 UTC during those runs; I did not inspect or restore its contents. Those desktop captures were superseded. All ten final desktop captures were rerun with `env -i` and private HOME/T3/XDG applied before the entire headless-desktop wrapper; private keyring files were verified for all ten. Retained process snapshots directly show private keyring helper HOME for six runs; concurrent teardown overwrote four snapshots, so those four retain the exact allowlisted launcher argv and generated private keyring files instead. Host keyring mtime stayed at 00:30:02 through the corrected recaptures.

Superseded logs remain in `D-superseded-launcher-home` and the earlier port-collision logs remain in `D-attempt1`. Previous public upload URLs are retained in `superseded-upload-links.json`; only `upload-links.json` and this ledger identify the final set. Two diagnostic PNGs (`after-L1-initial.png`, `before-L1-debug.png`) are also labeled diagnostics, not final acceptance evidence.

## What changed and teardown

No tracked files, index, checkout, branch, PR state, or live T3 database were changed. No product authentication settings were intentionally changed; the keyring side effect above remains explicitly disclosed. No live `~/.t3/userdata` was read, copied, or opened. No host prefix directory was modified. Scratch-only dependency alias and extracted development headers enabled normal builds. The host-keyring caveat above is the one observed possible host-state side effect. No push, comment, watch, or merge was performed.

All 333 captured supervisor/child/recorder/descendant PIDs were checked gone. Every video was checked with ffprobe; final extracted video frames accompany stills. Twenty pixel-diff files cover the ten before/after Settings/terminal still pairs. Build source and artifact hashes are in `build-manifest.json`; upload hashes are in `evidence-manifest.json`. Snapshots, scratch builds/runtimes, scripts, stubs, evidence, manifests and logs are retained for auditor rebuild and proof pass 2, per the latest handoff instruction.

## Friction

Category | Happened | Prevention
--- | --- | ---
Build prerequisites | Missing typescript-legacy alias and libsecret/glib headers. | Repair only scratch dependency links; extract dev packages under scratch and record exact build recipe.
X recording | First ffmpeg attempt lacked Xauthority. | Propagate the owned display environment to ffmpeg; validate finalized videos with ffprobe.
Concurrent desktop startup | Default backend port scan raced, causing EADDRINUSE and bootstrap HTTP 500. | Assign distinct T3CODE_PORT values before starting each app; retain failed logs and recapture.
Concurrent interaction | Two failed before-L1 scripts overlapped during recovery and corrupted a shell input line. | Wait for both scripts to finish; final recapture uses one controller per app and a clean terminal.
Wrapper isolation | Keyring helper initially inherited host HOME; host keyring mtime changed during that period. | Apply env -i/private HOME/XDG before headless-desktop itself, not only before Electron; recapture every desktop row and verify helper launch environment/private files.
Process snapshot race | Concurrent teardown overwrote four full process snapshots. | Preserve snapshots only while backend/helper descendants are present; retain exact launch argv and verify private generated files.
Native platforms | Linux host cannot supply native launchctl/Windows evidence. | Keep explicit M1/W1 unverified exceptions; unchanged source boundaries plus Linux-hosted focused tests.