# Relay hub local candidate verification

Target: [#11674](https://github.com/pingdotgg/t3code/pull/11674). Local unpushed candidate `0d18bba2b8dd1f9fdc1ddfa0e552af4033c30369`. No production deployment or candidate CI.

Observed regressions before their fixes: request 65 across two endpoints returned 204 instead of 503; closing a connector during uploads left 32 completed requests pending; repeating the canary connect helper with the same keys returned 409. Earlier receive-credit and link-write regressions are described in the checkpoint.

## Full per-user workerd run

```json

{
  "routing": "passed",
  "isolation": "passed",
  "credentialScoping": "passed",
  "concurrency": "passed",
  "flowControl": "passed",
  "emptyBodyStatuses": "passed",
  "identityEncoding": "passed",
  "websocketFragmentation": "passed",
  "websocketAutoResponse": "passed",
  "relink": "passed",
  "reconnect": "passed",
  "slowReader": "passed",
  "abandonedReader": "passed",
  "hibernation": "passed",
  "concurrentHttpAdmission": {
    "accepted": 64,
    "rejectedStatus": 503,
    "reservedBytes": 16777216,
    "disconnectedUploads": 32,
    "sibling": "passed"
  },
  "httpQueueAdmission": [
    {
      "mode": "beforeMetadata",
      "rejected": true,
      "status": 502,
      "bytes": 26,
      "sibling": "passed"
    },
    {
      "mode": "overCredit",
      "rejected": true,
      "status": 502,
      "bytes": 26,
      "sibling": "passed"
    }
  ],
  "revocation": "passed"
}

```

## Full shared-hub/shard-1 workerd run

```json

{
  "routing": "passed",
  "isolation": "passed",
  "credentialScoping": "passed",
  "concurrency": "passed",
  "flowControl": "passed",
  "emptyBodyStatuses": "passed",
  "identityEncoding": "passed",
  "websocketFragmentation": "passed",
  "websocketAutoResponse": "passed",
  "relink": "passed",
  "reconnect": "passed",
  "slowReader": "passed",
  "abandonedReader": "passed",
  "hibernation": "passed",
  "concurrentHttpAdmission": {
    "accepted": 64,
    "rejectedStatus": 503,
    "reservedBytes": 16777216,
    "disconnectedUploads": 32,
    "sibling": "passed"
  },
  "httpQueueAdmission": [
    {
      "mode": "beforeMetadata",
      "rejected": true,
      "status": 502,
      "bytes": 26,
      "sibling": "passed"
    },
    {
      "mode": "overCredit",
      "rejected": true,
      "status": 502,
      "bytes": 26,
      "sibling": "passed"
    }
  ],
  "revocation": "passed"
}

```

## Repeated helper connections and real origin forwarding

```json

[
  {
    "run": 1,
    "connected": true,
    "forwarded": true
  },
  {
    "run": 2,
    "connected": true,
    "forwarded": true
  }
]

```

## Focused checks

20 tests in 3 files passed at the final head, plus relay typecheck, lint, formatting, syntax checks and normal commit hooks. Across the takeover, 143 distinct tests in 12 files passed; the other paths stayed unchanged from those runs. Affected unit inventory: 98/10 files before, 67/6 files after. Four full parallel Opus/Sol review rounds; both final reviewers found no confirmed own-layer issue.

## Limits

Local Linux workerd only. Hibernation timing and the 16 MiB reserved-credit budget do not establish deployed Cloudflare timing or absolute isolate memory use. No production account, real two-host network, macOS, Windows, Electron shell, iOS or Android verification. Foundation integration remains blocked; no push or merge.