# Server runtime evidence

Scope: [#23005](https://git.cafe/pingdotgg/t3code/issues/23005), mirrored as [#23002](https://github.com/pingdotgg/t3code/issues/23002).

Before: merge-base [3b95e7831b](https://git.cafe/pingdotgg/t3code/commit/3b95e7831b11b17627dff16843bc087bfca397ec). After: final head [5f585059ab](https://git.cafe/pingdotgg/t3code/commit/5f585059ab210188feb0010c864b11b030f25caf).
Full diff SHA-256: cbba037d5e8910303bf6dcc289ff29df3c763c22a4435a8abd39979fd807cff2, identical to the previously reviewed diff. Worktree remained clean; git diff --check passed.

| Synthetic Linux identity | Before exit / initialize | After exit / initialize |
| --- | --- | --- |
| UID/GID 54321, absent files passwd, existing owned HOME=/home/anything | 255 / 0 bytes | 0 / 899 bytes |
| Same UID with synthetic files passwd entry | 0 / 899 bytes | 0 / 899 bytes |

Actual buildAntigravityAcpSpawnInput from each pinned revision generated spawn JSON; only the Linux args differ, adding --loas_pwd_fallback_in_corp after --uid=. Retained generate-spawns.ts bundles the real source at each revision, then calls its exported builder with an explicit synthetic environment. Run `bash /tmp/triage-23005/capture.sh`; no application server starts. Each runtime run uses a disposable docker --rm container, network disabled, runtime and fixture files mounted read-only, fresh temp/profile directories, no credentials or LD_PRELOAD. The controls clear supplementary groups and run as UID/GID 54321. The HOME directory exists and is owned by that UID. Scripts remain outside the worktree.

Runtime: antigravity-acp 1.3.0, protocolVersion 1; Debian 13 linux x86_64. Image sha256:a233358309231c51a1f96b9e2cec93ea8bcbf4df6f21eeb8cda2ec81e500d65b. Runtime archive SHA-256: 9fb60956af0a9d76220a4db91ca9ac88e2a2372ad68f985ab5fceace6b825b96.
Packages: google-compute-engine-oslogin 1:20260924.00-g1+deb13; libc6 2.41-12+deb13u4; libgcc-s1/libstdc++6 14.2.0-19. NSS passwd order: files cache_oslogin oslogin. Generator tools: Bun 1.3.14 and Node 24.21.0. Dockerfile uses mutable apt sources; image/package records pin the observed environment.

Final scoped result in merged-tests.log: 2 files, 30 tests passed (antigravityAuthSupport.test.ts and AntigravityDriver.test.ts). This existing final-run log was checked, not rerun. red-test.txt is historical argument-shape failure against an earlier base; the final expectation folds it into existing spawn coverage. It is not a fresh red test against this merge-base. The fresh actual-runtime before run supplies the current negative control.

Visual matrix: empty. No render paths changed; the three changed files are one server helper and two tests. Nothing else changed at render level. Installation validation and provider sessions share the helper. No browser or UI captures were used.

Limits: synthetic Debian OS Login NSS fixture, not a real GCE identity or metadata service. No authenticated turn, login, Settings flow, full installation lifecycle, Linux arm64, or macOS/Windows runtime verification. Initialize proves startup and protocol response only; it does not prove authenticated provider functionality or independently establish the bundled-libgcc causal chain. The historical reproduction.log includes an invalid /root fixture that passes before, and an LD_PRELOAD experiment that still fails; neither is the primary evidence.

Proof plan: [audited proof plan](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0a1f4f1a1e76ca7a/proof-plan.md).

Public synthetic fixtures and proof logs:

- [Dockerfile](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1f9a9ab8b9deaf3d/Dockerfile)
- [generate-spawns.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cfc69ff4d6a05eba/generate-spawns.ts)
- [capture.sh](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cb68ee27e2d132e6/capture.sh)
- [spawn-runtime.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c42060e5f149657c/spawn-runtime.py)
- [audit-controls.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d05837a92620be71/audit-controls.py)
- [reproduce.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1721582c647888be/reproduce.py)
- [spawn-before.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/908ef865220b28e3/spawn-before.json)
- [spawn-after.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f4745f0663f35d63/spawn-after.json)
- [generator.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f386bc07cc9086d3/generator.log)
- [provenance.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0873908d0fdc0f42/provenance.log)
- [t3-before.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d3adab64ccb06c8f/t3-before.log)
- [t3-after.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1008ec9af0eb3561/t3-after.log)
- [audit-controls.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fe0a0482a0d8caa2/audit-controls.log)
- [reproduction.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8823654b0f7fd054/reproduction.log)
- [red-test.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a83add9691bd60b5/red-test.txt)
- [merged-tests.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/376e06b6496c402e/merged-tests.log)

FRICTION tooling|Bun execution of the bundled module rejected node:sea|bundle for Node and invoke the actual builder with Node; retain the generator