# Proof audit pass 2

Findings: no blocking evidence defects. The final delivered set is clean and comparable for the scoped local web matrix. No missing A–K row, unexplained settled-state pixel change, stale baseline classification, duplicated ghost, persistent spinner, unmatched tooltip, or unintended clipping was found. PDF contents and the narrow file-pane contents are not promoted to verified claims.

Issue [#16096](https://git.cafe/pingdotgg/t3code/issues/16096), also [#16096](https://github.com/pingdotgg/t3code/issues/16096). Head [6ab7d74c21](https://github.com/pingdotgg/t3code/commit/6ab7d74c21397f3cc230c58d38161450f8b4be70), base [6e79211743](https://github.com/pingdotgg/t3code/commit/6e792117436662208bf2b6eb71ee8d0d88817e43). Worktree `/home/ubuntu/wt/issue-16096`, branch `fix/issue-16096`. Actual head and clean tracked status verified before and after. Complete diff is two production regex replacements and three positive parser cases. Baseline footage has the old ordinary-anchor behavior; head footage has the new chips. The index supplies revision provenance; the media itself does not embed a Git attestation. Head provenance was independently checked against both Git and the served Vite module. No branch switch occurred during this audit.

## Row status

| Row | Status | Independently examined proof |
|---|---|---|
| A | Sufficient for routing | Paired R1 and R2: ordinary anchor/no local surface before, named PDF surface and return after. PDF contents unverified. |
| B | Sufficient for routing | Paired R1: encoded destination reaches the same named PDF surface as A after. PDF contents unverified. |
| C | Sufficient for routing | Paired R1: bare basename reaches root 線性代數.pdf after. PDF contents unverified. |
| D | Sufficient for routing | Paired R1: dot-prefix and ASCII controls open named PDF surfaces on both revisions. PDF contents unverified. |
| E | Sufficient | Paired R1: actual “Unicode relative file opened successfully.” and “Exact path spelling is preserved.” text after; return visible. R2 opening/return is visible, but its cramped pane cannot independently establish the complete contents. |
| F | Sufficient | Paired stills and R1: matching-label chip, inline L2:C1 chip, unchanged plain basename code; matching-label text opens; workspace-relative file and line 2 highlight visible. |
| G | Sufficient | Paired R1: folder listing with 試卷.txt and 講義; extensionless file shows “Unicode extensionless opened successfully.”; return visible. |
| H | Sufficient | Paired R1: absent product menu before, product copy menu after, copied relative path in unsent composer, scratch cleared; find 1/2 before and 1/3 after, then dismissal. R2 menu remains accessible. |
| I | Sufficient | Paired R1: nested rendered Markdown stays anchor/plain code before; after anchor opens document-relative marker and inline opens workspace-relative marker. Tabs/returns visible. |
| J | Sufficient | Paired DOM traces show one ordinary target=_blank anchor and no chip. Replayed uploaded harness against running head and independently observed identical values. |
| K | Sufficient | Paired boundary traces cover L/N/M, encoded target, folder, extensionless, positions, exclusions, no-cwd, bare-inline gate, absolute/Windows controls. Replayed both revisions from uploaded harness; baseline source extracted with git show into scratch, unchanged dependencies reused. Outputs exactly match delivered JSON. |

Narrated steps correspond to visible interactions. Timestamps identify command starts rather than guaranteeing an already-settled result at that exact frame; asynchronous panels follow shortly afterward. All required milestones are actually visible. Silent footage plus written narration is adequate here.

## Images and independent pixel verification

Opened all eight before/after stills and all eight diff images, grouped by 1440/light, 1440/dark, 390/light, 390/dark. Independently recomputed absolute RGB difference amplified 4×, and magenta masks for max channel difference strictly greater than 16. Every delivered diff image matches recomputation exactly.

| Pair | Changed pixels >0 | Changed pixels >16 |
|---|---:|---:|
| 1440 light | 61,394 | 55,187 |
| 1440 dark | 60,830 | 55,326 |
| 390 light | 225,876 | 213,443 |
| 390 dark | 225,807 | 210,384 |

Visible changes are fully accounted for in the index: blue anchors become descriptive text plus chips; matching label becomes chip alone; inline position becomes chip; basename-collision suffixes also affect the unchanged dot-prefix control; widths/wrapping and downstream positions change; narrow chips ellipsize and G wraps. ASCII and fixture.md chip behavior remains. Static diffs change only the message region. Action-result panels, folder listing, selected line, copy toast/scratch, and find highlights are deliberately different interaction states. No unexplained change was found. Difference-image overlapping outlines are mathematical before/after differences, not duplicated UI rendering.

## Independent head capture rebuild

Reused the authorized existing synthetic isolated `.t3` seed. Downloaded the uploaded `extend-fixture.mjs` trace and verified it is byte-identical to the local trace (SHA256 `70e1c6a838e58bbec53a3abea9a315e1378d78ea0509416a6449f28d5edb96bc`); did not rerun nonessential SQL writes. The complete rendered fixture matches the delivered capture.

Started exactly one tracked `vp run dev --no-seed` session (70478) from the specified head/worktree, using `.t3`, web 6262/server 14302. Opened own native preview tab, paired to isolated server, navigated the evidence thread. Linux x86_64, Chromium 154, DPR2, CSS1440×1000, light, exported1280×889. Applied the uploaded render-environment script: date frozen to 2026-10-24T11:50:00Z, identical EvidenceCJK font loaded, animations/transitions disabled. Closed details panel/sidebar, left expanded empty composer, moved pointer to blank space, finished existing animations, and took repeated settled snapshots. Verified fetched Vite markdownLinks module contains Unicode property classes.

**Exact final pixel delta against delivered after-1440-light.png: 0 / 1,137,920 pixels at threshold zero; 0 pixels above16; max channel delta0.** Two successive settled snapshots match. Initial immediately-after-toggle snapshot differed by36 pixels (>0),6 pixels (>16), max channel22, bounding box [18,17,30,30), solely sidebar icon; this transient disappeared in both settled repetitions. No image pixels were edited or masked.

Rebuilt artifact: `rebuilt-settled-1440-light.png`. Counts: `settled-rebuild-delta.json`; independent paired checks: `independent-diff-check.json`. All audit scratch is under `/tmp/issue-16096/proof2`.

## Examined artifacts and cleanup

Read AGENTS.md, matrix pass1, full evidence index, complete source diff, uploaded fixture/environment/diff/harness drivers, paired J/K traces, captures metadata, recordings metadata and narration. Downloaded all31 linked evidence artifacts: all byte-identical to local copies; SHA256/size manifest in `public-integrity.json`. Decoded all four videos with ffmpeg into independent 1fps frames/contact sheets, plus full-resolution milestone frames and 5fps sampling around copy/find. Inspected E/F/G/I marker contents, F line2, H clipboard/find, controls/PDF surfaces, and both narrow sessions. Representative detailed frames retained under scratch; no product/test source changes.

Stopped own session70478 with Ctrl+C; verified ports6262 and14302 have no listeners. Head remains6ab7d74c21397f3cc230c58d38161450f8b4be70 on fix/issue-16096, tracked working tree clean. No forge writes, watcher, commit, push, or merge. Audit ran approximately12:07:35–12:12 UTC, within20-minute budget. Lead's80-test result is supplied context, not a test run claimed by this auditor.

## FRICTION

- Initial urllib public download returned403; direct curl with browser user-agent succeeded. A subsequent batch hit one DNS failure; bounded retry completed all31 artifacts with exact local equality.
- One sidebar click targeted a hidden duplicate and timed out; corrected to the visible locator. One evaluate rejected trailing whitespace; trimmed and reran successfully. Neither affected delivered evidence.
- PDF plugin unavailable: only named surface/routing established. Narrow file explorer leaves a cramped text pane: opening/return/menu established, complete narrow contents unverified.
- Native macOS/Electron, native iOS/Android, editor/reveal/modifier/save/share actions, and remote/relay/tunnel/multi-environment transport remain unverified. Synthetic projection seeding proves rendering/navigation, not event-sourced command ingestion. Font/date/motion overrides are capture conditions, not product behavior claims.

VERDICT: SUFFICIENT