# Evidence-only delivery — PR [#23456](https://git.cafe/pingdotgg/t3code/pulls/23456)

Head [dca0af89a8](https://git.cafe/pingdotgg/t3code/commit/dca0af89a8b60ae4a5dd81859fa5ee06c7544aaf), full SHA `dca0af89a8b60ae4a5dd81859fa5ee06c7544aaf`; branch `fix/issue-20348`; supplied base [96bae5465b](https://git.cafe/pingdotgg/t3code/commit/96bae5465bc5dfaedc890998a7a71672fb470ae2).

Read the pass-1 audit first. Existing attached-child capture and before/red/43-test artifacts retained byte-for-byte; no redundant A UI reproduction. This is evidence delivery, not merge approval.

## Public sanitized evidence

- [Matrix and limitations](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/76b60aacaef34cf6/matrix.md)
- [Selected transcripts, runtime/protocol records and provenance](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9179d8c8f545dc24/transcript.txt)
- [Capture and harness scripts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/563b86eff745e899/scripts.txt)
- [Individually named files archive](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f97a94eb1f58d8a5/evidence.tar.gz)
- [SHA256 manifest](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fede6a0e1da05887/public-manifest.json)

All five uploads downloaded with curl and matched local bytes; see `upload-verification.json`. Exact execution commands are in `commands.md` within the transcript/archive, with C2 argv also in `C2-commands.json`. Upload command: `ghdrop upload --json /tmp/pr-23456-capture/scripts.txt /tmp/pr-23456-capture/transcript.txt /tmp/pr-23456-capture/matrix.md /tmp/pr-23456-capture/evidence.tar.gz /tmp/pr-23456-capture/public-manifest.json`. Used the [ghdrop skill](/home/ubuntu/.codex/skills/ghdrop/SKILL.md). No auth/config/raw provider logs or startup pairing data published.

## Captured rows

- A retained with its historical provenance qualification.
- U: real native Codex child; persisted `provider_native` lineage, parent/child/provider/native mapping; parent alone attached before settlement; empty cleanup attachment set; real child and parent unsubscribe acknowledgments. Instrumented server, no U gate armed.
- C1: **instrumented service-harness runtime capture**, real application server and Codex, normal CLI/MCP traffic. Attach succeeds while parent cleanup waits before the owner lock; recheck sees child attached and skips unload; C1_AFTER_CLEANUP durably completes. T3-delegated child (`app_owned`) identified explicitly.
- C2: **instrumented service-harness runtime capture**, real application/provider. Same child-owner lock request blocks while parent unload holds it, then acquires after unload returns, resumes native thread and durably completes C2_PONG. Gate extends unload return ~572ms after native acknowledgment; original timeout unchanged.
- P: separate unmodified-source application server PID 636010; real FINAL_HEAD_PONG completed. Observation hook returned all modules unchanged. All 971 loaded project modules match HEAD blobs; none untracked. PID/executable/argv/cwd/runtime record, source digests and clean checkout recorded. Instrumented PID 604978 separately records original and transformed manager digests.

Selected persisted records: `persisted-results.json`, `final-projections.json`. Native traffic: `protocol.ndjson`. Diagnostic ordering: `diagnostic.ndjson`. Capture assertions: `evidence-verification.json`; these assertions check evidence and are not application tests. No tests rerun.

## Missing / limits

Historical A process identity is unavailable because its checkout and isolated DB are absent. C1/C2 are explicitly gated service-harness runtime evidence, not uninstrumented UI evidence or unit-test output. C2 delays the enclosing unload effect after the actual native unsubscribe response; an attach during a still-pending native wire response and naturally occurring uninstrumented contention remain unproven. No OpenCode/mobile/relay/tunnel runtime capture.

## One Cafe status read

Exact supplied head: **34 successful / 0 pending / 0 failing** checks. Stored conflict snapshot was stale (`current:false`, older base), so conflict readiness remained pending. No repeated status read, PR polling or watches. Required app registration completed; final thread list confirmed linked and not watched.

## FRICTION

Native child app send rejected: “This subagent is run by its provider and cannot take messages. Message the parent thread instead.” Retained native U and switched C1/C2 to identified T3-delegated lineage. Initial background server attempt did not survive shell; subsequent sessions tracked. CLI `project list` unsupported; used add/snapshots. Native log NTIVE prefix required parser correction. Evidence verifier initially rejected equal-millisecond request/release timestamps; corrected to assert append-record ordering. Python default HTTP download got 403; curl succeeded and verified all bytes. Initial index upload correctly failed because verification had stopped before writing the file; final index generated afterward. No application test failure or confirmed code defect asserted.

## Cleanup

All captured server PIDs 595434, 595743, 604978, 636010 absent. Running servers stopped by captured PID; tool sessions exited and port 28946 empty. Deleted isolated `/tmp/pr-23456-capture/state`, private logs/snapshot and dead socket. Sanitized scripts/transcripts retained. Checkout clean; no tracked edits, commits, pushes, PR edits/comments, merges or watches. No live T3 state accessed read-write.

Model/harness: gpt-6.1-sol through Codex in T3 Code.