# Final proof audit recheck

All 44 mandatory rows pass. Replacement recordings R01/R03/R11 (manifest rows 33/35/41) resolve the only three objections from [full pass2 audit](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c450eae560f6e66b/report.md). No unresolved evidence objection remains.

Target [#21064](https://git.cafe/pingdotgg/t3code/pulls/21064), also [#21064 on GitHub](https://github.com/pingdotgg/t3code/pull/21064); original contributor trahane/t3code, branch fix/sidebar-images-outside-workspace at [31c5a73](https://github.com/trahane/t3code/commit/31c5a73eb08d114a3ded38ab0aa74af498339be9), base main. Replacement branch takeover/pr-21064, worktree /home/ubuntu/wt/pr-21064. Spec: persisted file preview side-panel images outside the project workspace use the existing media-file resource; inside images, non-image files and draft resource behavior remain unchanged. Repro from [#21067](https://github.com/pingdotgg/t3code/issues/21067): Markdown folder link /tmp/screenshots/, select example.png. No serving/auth/permissions change.

Evidence baseline [3cc31ed](https://github.com/pingdotgg/t3code/commit/3cc31ed27c8956b36cee35a50509fb7c6869592b); capture/rebuild head [992698e](https://github.com/pingdotgg/t3code/commit/992698e28c3234a58c048aae77fb6a9aecb2e1b5). Final merge of main [ab1db24](https://github.com/pingdotgg/t3code/commit/ab1db248fb49feacebadca7fe8e518426225b27c). Independently ran `git diff --quiet 992698e28c3234a58c048aae77fb6a9aecb2e1b5 HEAD -- apps/web packages/client-runtime/src/mediaReference.ts`: exit 0. Every web blob and classifier is identical to the captured and independently rebuilt revision. No runtime rebuild repeated. Lead reports 21 scoped tests pass after merge; this read-only audit did not rerun tests.

## Public evidence and integrity

Audited [updated index](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2875ebbad86511f0/index.md), [final manifest](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/03c4decdeb4b78f2/manifest.json), and [repair report](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fce7dbb7aa0906e6/repair-report.json). The index and repair report point to an earlier-uploaded manifest URL; its parsed contents are identical to the supplied final manifest. Public final manifest and repair report are byte-identical to local repair-r3 copies.

Compared prior accepted and final manifests: exactly rows 33/35/41 changed; all 41 other entries are identical, including artifact URLs and hashes. Freshly downloaded all 44 public artifacts and verified all SHA256 hashes. Re-downloaded all 32 accepted public amplified diff PNGs: their URLs remain present in the new index and all hashes match prior audit's accepted public copies. Thus all 32 stills, all 32 diffs and all 9 other recordings preserve the prior acceptance. Reused prior full visual audit for these unchanged rows, as authorized.

Downloaded the three replacement action logs and all nine public sheets; hashes match the inspected local copies. Independently decoded each downloaded replacement video at 15fps for the first second and 2fps over its whole duration. Every resulting frame is pixel-identical to the corresponding inspected repair-r3 frame. [Machine-readable verification with public URLs and hashes](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5428f92c3272c63/verification.json).

## Replacement inspection

Opened and visually inspected all 45 first-second frames (15 per recording, 0.000–0.933s), and all six full-sequence sheets. All openings show rendered Markdown links without the unrelated project overview popover. Correct themes, 1440×900, 15fps H.264, no audio stream. Clean startup precedes actions. Inspected capture scripts: direct x11grab output with no trim operation; they close popover/menu before recording. Full-sequence sampled frames and final states are present.

|Row / matrix|Duration|Observed actual video timestamps|Result|
|---|---|---|---|
|33 / R01, before light core|10.600s|0 clean; 1.5 outside tree; 2 outside example.png baseline error; 6 inside image; 7.5 text; 9.5 reopened outside tree; 10 reopened outside baseline error|PASS|
|35 / R03, before dark core|10.467s|0 clean; 1 outside tree; 1.5 outside example.png baseline error; 5 workspace tree; 5.5 inside image; 7.5 text; 9 reopened outside tree; 9.5 reopened outside baseline error|PASS|
|41 / R11, before dark AV|7.933s|0 clean; 1.5 inside video FRAME11; 2 FRAME22; 3 outside video FRAME6; 3.5 FRAME19; 4.5 inside audio controls; 6.5 outside audio controls|PASS|

Timeline entries in manifest and public action logs match. Observed timestamps match visible sampled video states. Driver timestamps are explicitly relative to ffmpeg process spawn and are not presented as exact MP4 times. Core flows visibly cover rendered link → tree → outside image → workspace image → text → close/reopen outside image. AV frames advance inside/outside; audio controls and readyState/currentTime/paused trace support playback, without claiming recorded sound. All three replacement URLs occur in the accepted index; all three superseded bad video URLs are absent from it. Old filenames remain only as explicit superseded metadata, not accepted links.

## Retained proof and wording

Retain pass2's independent rebuild result: actual rendered Markdown folder link → real host tree → select example.png → settled panel; media-file request confirmed; rebuilt full-frame PNG against accepted row2 has **zero changed pixels at thresholds 0 and 8**, max channel delta 0 across 1,296,000 pixels. [Rebuild comparison](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a848883a31e2d226/rebuild-diff.json), [rebuilt capture](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9b41d6628461b24c/rebuilt-after-1440-light-outside.png). This is prior independently performed runtime proof, retained rather than rerun.

PDF wording is correct: controls visibly render the same PDF document on both revisions, with zero changed pixels. Pass2 visually confirmed PDF CONTROL and blue rectangle in all four accepted PDF stills. No erroneous blank-PDF claim remains. Other retained full-audit findings: inside PNG/text/HTML/PDF pairs unchanged, outside image delta confined to preview content; real unsent drafts retain draft-workspace-file; controlled pending/signing/decode supplement is labelled as a harness. Responsive 390 evidence is web, not native mobile. No desktop shell/native mobile/remote/tunnel/other-OS runtime verification is claimed.

## Full mandatory row status

|Row|Revision|Cell|Fixture/flow|Status|Basis|
|---|---|---|---|---|---|
|01|before|1440-light|outside|PASS|Prior full audit; freshly verified unchanged hash|
|02|after|1440-light|outside|PASS|Prior full audit; freshly verified unchanged hash|
|03|before|1440-light|inside|PASS|Prior full audit; freshly verified unchanged hash|
|04|after|1440-light|inside|PASS|Prior full audit; freshly verified unchanged hash|
|05|before|1440-light|text|PASS|Prior full audit; freshly verified unchanged hash|
|06|after|1440-light|text|PASS|Prior full audit; freshly verified unchanged hash|
|07|before|1440-dark|outside|PASS|Prior full audit; freshly verified unchanged hash|
|08|after|1440-dark|outside|PASS|Prior full audit; freshly verified unchanged hash|
|09|before|1440-dark|inside|PASS|Prior full audit; freshly verified unchanged hash|
|10|after|1440-dark|inside|PASS|Prior full audit; freshly verified unchanged hash|
|11|before|1440-dark|text|PASS|Prior full audit; freshly verified unchanged hash|
|12|after|1440-dark|text|PASS|Prior full audit; freshly verified unchanged hash|
|13|before|390-light|outside|PASS|Prior full audit; freshly verified unchanged hash|
|14|after|390-light|outside|PASS|Prior full audit; freshly verified unchanged hash|
|15|before|390-light|inside|PASS|Prior full audit; freshly verified unchanged hash|
|16|after|390-light|inside|PASS|Prior full audit; freshly verified unchanged hash|
|17|before|390-light|text|PASS|Prior full audit; freshly verified unchanged hash|
|18|after|390-light|text|PASS|Prior full audit; freshly verified unchanged hash|
|19|before|390-dark|outside|PASS|Prior full audit; freshly verified unchanged hash|
|20|after|390-dark|outside|PASS|Prior full audit; freshly verified unchanged hash|
|21|before|390-dark|inside|PASS|Prior full audit; freshly verified unchanged hash|
|22|after|390-dark|inside|PASS|Prior full audit; freshly verified unchanged hash|
|23|before|390-dark|text|PASS|Prior full audit; freshly verified unchanged hash|
|24|after|390-dark|text|PASS|Prior full audit; freshly verified unchanged hash|
|25|before|1440-light|outside-html|PASS|Prior full audit; freshly verified unchanged hash|
|26|after|1440-light|outside-html|PASS|Prior full audit; freshly verified unchanged hash|
|27|before|1440-light|inside-html|PASS|Prior full audit; freshly verified unchanged hash|
|28|after|1440-light|inside-html|PASS|Prior full audit; freshly verified unchanged hash|
|29|before|390-dark|outside-pdf|PASS|Prior full audit; freshly verified unchanged hash|
|30|after|390-dark|outside-pdf|PASS|Prior full audit; freshly verified unchanged hash|
|31|before|390-dark|inside-pdf|PASS|Prior full audit; freshly verified unchanged hash|
|32|after|390-dark|inside-pdf|PASS|Prior full audit; freshly verified unchanged hash|
|33|before|1440-light|core|PASS|Fresh replacement visual inspection and integrity check|
|34|after|1440-light|core|PASS|Prior full audit; freshly verified unchanged hash|
|35|before|1440-dark|core|PASS|Fresh replacement visual inspection and integrity check|
|36|after|1440-dark|core|PASS|Prior full audit; freshly verified unchanged hash|
|37|before|390-light|core|PASS|Prior full audit; freshly verified unchanged hash|
|38|after|390-light|core|PASS|Prior full audit; freshly verified unchanged hash|
|39|before|390-dark|core|PASS|Prior full audit; freshly verified unchanged hash|
|40|after|390-dark|core|PASS|Prior full audit; freshly verified unchanged hash|
|41|before|1440-dark|av|PASS|Fresh replacement visual inspection and integrity check|
|42|after|1440-dark|av|PASS|Prior full audit; freshly verified unchanged hash|
|43|before|390-dark|draft|PASS|Prior full audit; freshly verified unchanged hash|
|44|after|390-dark|draft|PASS|Prior full audit; freshly verified unchanged hash|

44/44 mandatory rows accepted. Prior full audit covers unchanged rows; all three repaired rows newly inspected. Independent rebuild retained and linked.

## Scope and friction

Read-only worktree audit. All commands explicitly selected /home/ubuntu/wt/pr-21064. Scratch and report only under /tmp/ev-21064/recheck-r3. No source edits, commits, push, forge comments, merge, watch, browser/server launch, process termination, or live ~/.t3/userdata access. Worktree remains clean. Harness-required PR registration performed; no review comment published.

FRICTION: artifact identity | obsolete scratch diffs share accepted artifact basenames, so a broad local filename search initially selected an outdated copy | compare against the prior audit's accepted public download directory and verify public SHA256; all 32 then match.

FRICTION: revision identity | checkout advanced by main merge after capture | exact diff confirms every web blob and mediaReference.ts unchanged; retain pinned rebuild proof and explicitly name final merge.

VERDICT: SUFFICIENT