# Capture result — Linux, 2026-10-24

Scope: [#17965](https://git.cafe/pingdotgg/t3code/issues/17965), supplied baseline [6e79211743](https://git.cafe/pingdotgg/t3code/commit/6e79211743) → [0b3335b0e4](https://git.cafe/pingdotgg/t3code/commit/0b3335b0e41dc727c444aa287936f91869eeaf6d). Evidence only; no PR, comments, push, merge, source edit or scratch commit.

| Row | Result | Proof / limitation |
|---|---|---|
| B0 | VERIFIED Linux | Supplied baseline provenance retained; preserved baseline bundle additionally recaptured in real app at matching geometry. |
| G1 | VERIFIED Linux | Before blocked; after actual native Cancel → blocked → retry → Trust → README loaded. Light and dark OS-dialog stills. |
| G2 | VERIFIED Linux | Reload, menu cache clear and actual process restart retain trust. Final request-counter fixture proves three HTTP200 navigations with identical body hash. |
| G3 | VERIFIED Linux, combined Settings route | Settings Clear cookies and cache executes direct desktop bridge plus server cleanup. Approval file removal observed; reload and actual restart prompt again; Cancel denies. Does not isolate desktop IPC from simultaneous server cleanup. |
| G4 | VERIFIED Linux | Positively identified runtime=server native webview. Passive backend IPC trace includes actual Network.clearBrowserCache and Network.clearBrowserCookies commands and successful replies. Cache retains; cookies revoke; retry prompts and Cancel denies. |
| G5 | VERIFIED Linux | Default trusted; Incognito independently prompts, accepts and reloads; actual process restart forgets Incognito while Default remains trusted. |
| T1 | VERIFIED scoped tests; remaining guards UNVERIFIED independently | 21 focused tests pass across BrowserSession and DesktopBrowserHost. Endpoint/path/port/fingerprint/WSS/session isolation exercised. Additional hostname/error-code/unapproved-subresource/nonallowlisted/malformed-URL/destroyed-contents guards remain source-traced only. HTTPS fixture does not test WSS at runtime. |
| T2 | VERIFIED save failure; malformed/unreadable-load fallback UNVERIFIED independently | Real isolated new profile made unwritable temporarily; clean replacement native save-error still/movie, permissions restored, retry prompts. Existing focused fault/race tests pass. Malformed/unreadable-load fallback source-traced only. |
| T3 | UNVERIFIED concurrency and Windows/macOS runtime | No same-key/competing-key runtime or new test proof added. Native ownership source-traced only. Linux capture cannot establish Windows/macOS ownership, button usability or theme behavior. |

Window/context: Xvfb 1920×1080, real Electron app1100×780, zoom100%, same localhost:18443/README.md endpoint and certificate; baseline/head desktop bundles as recorded in seed-recipe. The head build used the existing lead Vite web server; relevant changes are desktop-only. Five movies contain labeled before/after sections, elapsed timestamps, and explicit stop/relaunch cuts. See chapters and UTC timeline.

Static proof: matched before, loaded after, light warning, dark GTK warning and save-error sample triples were pixel-identical at two 500ms gaps. All screenshots/diffs and recording contact sheets were opened and inspected. Exploratory spinner samples are not acceptance stills.

Visual diff: exact threshold0 flags328404/2073600 pixels (15.837384%); max RGB channel delta>12/255 flags54304 (2.618827%). Differences are confined to preview region: authority error icon/message/code/Details+Reload replaced by README content, slight error-page/guest-white background shift, scrollbar, and annotate/screenshot/float availability. No changed pixels outside preview region. Both diff maps and machine metrics included.

Fixture change: inherited HTTPS process disappeared during extra G2 verification. Failed exploratory requests remain explicitly in transcript; final G2 movie uses replacement owned HTTPS fixture with the same certificate and README body, plus X-Evidence-Request response header and request log. No visual body change. No private key uploaded.

Other changes: generated build output, isolated .t3-desktop state, environment-specific Electron session partitions, new proof profile; temporary mode500 restored to700. Head generated bundle restored. All capture-owned Electron/HTTPS/recorders stopped. Shared lead web/server left running. Tracked checkout unchanged; .t3-desktop remains untracked for lead cleanup. Full environment, seed recipe and all drivers are supplied. Exploratory raw recordings/stills are archived separately from the five acceptance movies.

Web/mobile responsive variants do not apply to native OS dialogs; no web/mobile component change. Windows/macOS remain explicitly unverified. Supplied217-test/review reports were not independently rerun or adopted as evidence.

T2 evidence correction: [clean still](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2a6d575a10171367/T2-save-error.png) · [24.9s interaction recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e77367f7c1ab7c8a/T2-save-failure-clean.mp4) · [capture, sample hashes, drivers, friction and cleanup](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05ca8de24ac68709/T2-correction.md). The old save-error still/movie are rejected because of the warning repaint remnant. Replacement app positioned700,150 after a real resize/repaint; whole-desktop captures unedited. Three samples across two500ms gaps: zero changed pixels. G1–G5 unchanged. No new test run or expansion of verified scope.