## Evidence
**Coverage: 3/4 required rows verified (R1–R3); R4 rejected-key state remains unverified.** All four required rows have recording artifacts, but the R4 artifact is an honest failed setup attempt, not the requested authentication-error capture. Nine additional matrix rows are waived/outside the minimum and listed below. Nothing outside the catalog-membership change differs at zero threshold.
PR [#28018](https://git.cafe/pingdotgg/t3code/pull/28018) ([GitHub mirror](https://github.com/pingdotgg/t3code/pull/28018)). Before — [50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde); After — [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1). Both run the real app from their own checkout, with isolated fresh databases and identical stopped-server cache seed. No DOM catalog mocking or component harness was used.
Real web dev app, T3 preview Chromium 156 on Linux x86_64 (fs-27), no device emulation, DPR 2, 100% zoom/font scaling (16px root), CSS viewport 1440×1000, dark. Full-surface PNG output is 1280×889 because preview downscales; native MP4 is 2880×2000. Optional narrow stills: CSS 390×1000, output 780×2000, same browser/DPR/theme. Server and browser Date frozen to 2026-11-03T02:30:00Z; real scheduling preserved. Reduced-motion emulation is unavailable in preview; no appearance CSS injected.
Before accepted stills: fonts ready and resource-quiet, filter input blurred, neutral pointer, then two pixel-identical frames 500 ms apart. All published captures/diffs and recording keyframe contact sheets were opened and visually reviewed. Settings cleared scrollTop 560, filtered scrollTop 40 on both sides; narrow outer scrollTop 1150. Composer draft has no project, details closed, live Auto selected, and no turn sent. Filters use slugs in Settings and display names in the picker.
Diff0 = absolute per-channel difference amplified ×16, threshold zero. DiffT = magenta where max RGB-channel difference exceeds 12/255, black otherwise. Diffs compare full PNG surfaces without registration, cropping, or masked regions. Pixel counts and bounding boxes are in [diff-metrics.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7874eff24ab30eb7/diff-metrics.json).
| Matrix row | Capture status / reason |
|---|---|
| R1 | Captured and verified, base + head recordings and stills |
| R2 | Captured and verified, base + head recordings and stills |
| R3 | Captured and verified, base + head continuous refresh/reload/restart recordings plus persisted cache/RPC |
| R4 | Attempt captured; required rejected-key state UNVERIFIED because this VM/edge accepts the invalid override; missing-key recording is supplemental only |
| W1 | Waived by matrix: unchanged checking/warning retention; not independently captured |
| W2 | Waived by matrix: unchanged empty-discovery warning retention; not independently captured |
| E1 | Waived by matrix: unchanged transport error retention; networking not disrupted; not independently captured |
| E2 | Waived by matrix: no previous inventory, outside demonstration of the fix; not captured |
| D1 | Waived by matrix: unchanged disabled/hydration guards; not captured |
| V1 | Waived by matrix: renderer/count thresholds unchanged; exact small catalogs not captured |
| S1 | Waived by matrix: saved-selection behavior unchanged; no migration/repair claim; not captured |
| A1 | Shared picker path, separate caller capture not required by matrix; not independently captured |
| P1 | Outside minimum: no native/Electron/remote runtime capture claimed |
Fixture source: [matrix-source.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/905c93544ea0d0fa/matrix-source.md). Live catalog N=48. Seed count=51; the synthetic stale slugs do not occur in the SDK catalog. Optional preferences/custom rows were omitted on both sides. The full seed contains account identity and stays private; its SHA-256, safe counts/slugs and health fields are in [seed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2f9efd395015d823/seed-sanitized.json).
### R1 — Ready stale-rich Settings · 1440×1000 · dark
Verified on base and head. Shared stopped-server seed F has 48 real built-ins plus three synthetic stale built-ins, all isCustom:false/capabilities:null. Optional favorites, hidden models and custom rows are omitted consistently (K=0). Ready/authenticated base retains 51; head exposes 48. Each stale slug is filtered individually, then filters are cleared and live Composer 2.5 checked.
**Scripted steps and timestamps (seconds from recording start, approximate tool timing), above the recording pair:**
| Before actions | After actions |
|---|---|
| 0.01s — Recording started
3.82s — Settled frame: R1-settings-clear
3.82s — Settings: filter models `old-account-only-a`
8.69s — Settled frame: R1-settings-old-account-only-a
8.69s — Settings: filter models `old-account-only-b`
13.31s — Settled frame: R1-settings-old-account-only-b
13.31s — Settings: filter models `retired-model-x`
17.87s — Settled frame: R1-settings-retired-model-x
17.87s — Settings: filter models `composer-2.5`
22.45s — Settled frame: R1-settings-composer-2.5
24.31s — Settings: clear filter; show total and live models
24.31s — Close Settings | 0.01s — Recording started
3.76s — Settled frame: R1-settings-clear
3.76s — Settings: filter models `old-account-only-a`
8.38s — Settled frame: R1-settings-old-account-only-a
8.38s — Settings: filter models `old-account-only-b`
12.83s — Settled frame: R1-settings-old-account-only-b
12.83s — Settings: filter models `retired-model-x`
17.27s — Settled frame: R1-settings-retired-model-x
17.27s — Settings: filter models `composer-2.5`
21.95s — Settled frame: R1-settings-composer-2.5
23.74s — Settings: clear filter; show total and live models
23.74s — Close Settings |
| Before — base | After — reviewed head |
|---|---|
| [before-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/665b86a08dd0de6d/before-R1-R2.mp4)
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | [after-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fa94bd385e1a8a84/after-R1-R2.mp4)
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
| Frame / viewport / theme | Before
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | After
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | Diff0
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | DiffT12
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
|---|---|---|---|---|
| R1-settings-clear · 1440×1000 · dark |  |  |  |  |
| R1-settings-composer-2.5 · 1440×1000 · dark |  |  |  |  |
| R1-settings-old-account-only-a · 1440×1000 · dark |  |  |  |  |
| R1-settings-old-account-only-b · 1440×1000 · dark |  |  |  |  |
| R1-settings-retired-model-x · 1440×1000 · dark |  |  |  |  |
### R2 — Composer Cursor tab and search · 1440×1000 · dark
Verified on base and head, using the same recording pair as R1. Explicitly select Cursor before searching; do not infer absence from the first virtualized viewport. Search stale display names A/B/X and positive live Composer 2.5. Auto is a live selected draft model. No optional favorites or hidden/custom controls were seeded, so there is no favorite-group claim.
**Scripted steps and timestamps (seconds from recording start, approximate tool timing), above the recording pair:**
| Before actions | After actions |
|---|---|
| 24.31s — Settings: clear filter; show total and live models
24.31s — Close Settings
25.92s — Open composer model picker; select Cursor tab
34.76s — Settled frame: R2-picker-clear
34.76s — Composer: search models `Old Account Only A`
39.26s — Settled frame: R2-picker-Old-Account-Only-A
39.26s — Composer: search models `Old Account Only B`
43.74s — Settled frame: R2-picker-Old-Account-Only-B
43.74s — Composer: search models `Retired Model X`
48.05s — Settled frame: R2-picker-Retired-Model-X
48.05s — Composer: search models `Composer 2.5`
52.32s — Settled frame: R2-picker-Composer-2.5
52.32s — Composer: search models `(clear)`
55.52s — Recording finished | 25.48s — Open composer model picker; select Cursor tab
31.43s — Settled frame: R2-picker-clear
31.43s — Composer: search models `Old Account Only A`
35.90s — Settled frame: R2-picker-Old-Account-Only-A
35.90s — Composer: search models `Old Account Only B`
40.15s — Settled frame: R2-picker-Old-Account-Only-B
40.15s — Composer: search models `Retired Model X`
44.57s — Settled frame: R2-picker-Retired-Model-X
44.57s — Composer: search models `Composer 2.5`
48.83s — Settled frame: R2-picker-Composer-2.5
48.83s — Composer: search models `(clear)`
52.04s — Recording finished |
| Before — base | After — reviewed head |
|---|---|
| [before-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/665b86a08dd0de6d/before-R1-R2.mp4)
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | [after-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fa94bd385e1a8a84/after-R1-R2.mp4)
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
| Frame / viewport / theme | Before
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | After
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | Diff0
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | DiffT12
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
|---|---|---|---|---|
| R2-picker-Composer-2.5 · 1440×1000 · dark |  |  |  |  |
| R2-picker-Old-Account-Only-A · 1440×1000 · dark |  |  |  |  |
| R2-picker-Old-Account-Only-B · 1440×1000 · dark |  |  |  |  |
| R2-picker-Retired-Model-X · 1440×1000 · dark |  |  |  |  |
| R2-picker-clear · 1440×1000 · dark |  |  |  |  |
### R3 — Refresh, browser reload, persisted cache and server restart · 1440×1000 · dark
Verified on base and head. The continuous recordings include the earlier catalog walkthrough; R3 starts at 69.15s before / 82.98s after. Use the corrected R1/R2 pair above for catalog comparisons. Refresh is an idempotence/no-resurrection check: head startup already removed stale built-ins. The click is not claimed as the initial stale→clean transition. Both surfaces are revisited after refresh/reload/restart. Sanitized cache/RPC show 51/ready/authenticated on base and 48/ready/authenticated on head, with stale presence true/false respectively.
**Scripted steps and timestamps (seconds from recording start, approximate tool timing), above the recording pair:**
| Before actions | After actions |
|---|---|
| 69.15s — Open Settings
75.14s — Settings: select Providers > Cursor
75.14s — Click Refresh provider status
76.04s — Refresh pending state
78.54s — Refresh completed
80.06s — Settings: clear filter; show total and live models
82.97s — Settled frame: R3-refreshed-settings-clear
82.97s — Settings: filter models `old-account-only-a`
86.34s — Settings: clear filter; show total and live models
86.34s — Close Settings
88.17s — Open composer model picker; select Cursor tab
90.80s — Composer: search models `Old Account Only A`
92.33s — Composer: search models `Composer 2.5`
93.84s — Composer: search models `(clear)`
97.09s — Browser reload on projectless draft
101.05s — Open Settings
107.03s — Settings: select Providers > Cursor
108.52s — Settings: clear filter; show total and live models
111.51s — Settled frame: R3-reloaded-settings-clear
111.51s — Close Settings
113.11s — Open composer model picker; select Cursor tab
115.84s — Composer: search models `Old Account Only A`
117.37s — Composer: search models `(clear)`
120.93s — Stop/start base captured process group; same persisted home
133.96s — Server restarted; reload projectless draft
141.39s — Open Settings
147.73s — Settings: select Providers > Cursor
149.22s — Settings: clear filter; show total and live models
152.52s — Settled frame: R3-restarted-settings-clear
152.52s — Settings: filter models `old-account-only-a`
155.95s — Settings: clear filter; show total and live models
155.95s — Close Settings
157.63s — Open composer model picker; select Cursor tab
160.46s — Composer: search models `(clear)`
167.68s — Settled frame: R3-restarted-picker-clear
167.68s — Composer: search models `Old Account Only A`
169.21s — Composer: search models `Composer 2.5`
170.74s — Composer: search models `(clear)`
174.19s — Recording finished | 82.98s — Open Settings
89.14s — Settings: select Providers > Cursor
89.14s — Click Refresh provider status
89.95s — Refresh pending state
92.68s — Refresh completed
94.19s — Settings: clear filter; show total and live models
96.99s — Settled frame: R3-refreshed-settings-clear
96.99s — Settings: filter models `old-account-only-a`
100.30s — Settings: clear filter; show total and live models
100.30s — Close Settings
101.94s — Open composer model picker; select Cursor tab
104.64s — Composer: search models `Old Account Only A`
106.17s — Composer: search models `Composer 2.5`
107.68s — Composer: search models `(clear)`
110.94s — Browser reload on projectless draft
115.33s — Open Settings
121.17s — Settings: select Providers > Cursor
122.65s — Settings: clear filter; show total and live models
125.55s — Settled frame: R3-reloaded-settings-clear
125.55s — Close Settings
127.17s — Open composer model picker; select Cursor tab
129.82s — Composer: search models `Old Account Only A`
131.36s — Composer: search models `(clear)`
134.97s — Stop/start head captured process group; same persisted home
144.78s — Server restarted; reload projectless draft
152.63s — Open Settings
159.00s — Settings: select Providers > Cursor
160.51s — Settings: clear filter; show total and live models
163.57s — Settled frame: R3-restarted-settings-clear
163.57s — Settings: filter models `old-account-only-a`
167.12s — Settings: clear filter; show total and live models
167.12s — Close Settings
168.75s — Open composer model picker; select Cursor tab
171.61s — Composer: search models `(clear)`
178.37s — Settled frame: R3-restarted-picker-clear
178.37s — Composer: search models `Old Account Only A`
179.90s — Composer: search models `Composer 2.5`
181.43s — Composer: search models `(clear)`
184.91s — Recording finished |
| Before — base | After — reviewed head |
|---|---|
| [before-R3-full-walkthrough.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/415e6d241563a790/before-R3-full-walkthrough.mp4)
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | [after-R3-full-walkthrough.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/24dcac71f825e4b0/after-R3-full-walkthrough.mp4)
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
| Frame / viewport / theme | Before
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | After
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | Diff0
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | DiffT12
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
|---|---|---|---|---|
| R3-refreshed-settings-clear · 1440×1000 · dark |  |  |  |  |
| R3-reloaded-settings-clear · 1440×1000 · dark |  |  |  |  |
| R3-restarted-picker-clear · 1440×1000 · dark |  |  |  |  |
| R3-restarted-settings-clear · 1440×1000 · dark |  |  |  |  |
### R4 — Rejected-key retention guard · 1440×1000 · dark
**UNVERIFIED.** A deliberately invalid process-level override was confirmed in the spawned server environment, yet Cursor.me and models.list accepted it and returned the same 48 models. The real app therefore reported ready/authenticated and pruned the seed as a successful catalog. This is not evidence of rejected-key retention. See [invalid-key-probe-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5ad61552473c848/invalid-key-probe-sanitized.json) and [guard-invalid-key-accepted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a19bf1b62de5af24/guard-invalid-key-accepted-sanitized.json).
**Attempt steps and timestamps:** 0.01s — Recording started
6.45s — Settled frame: R4-attempt-settings-ready
6.45s — Settings: filter models `old-account-only-a`
11.21s — Settled frame: R4-attempt-settings-A
12.97s — Settings: clear filter; show total and live models
12.97s — Click Refresh provider status
14.05s — Refresh pending state
16.31s — Refresh completed
19.72s — Settled frame: R4-attempt-after-refresh
19.72s — Recording finished
| Before | After — head-only invalid-key attempt | Diff0 | DiffT |
|---|---|---|---|
| Not required | [R4-invalid-key-attempt.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e709a377f147628/R4-invalid-key-attempt.mp4)
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | N/A: head only | N/A: head only |
**Supplemental missing-key run (not a substitute for R4):** A separately seeded head run without CURSOR_API_KEY reaches installed=true, error/unauthenticated. Settings and persisted cache retain 51 including A after refresh; picker shows a sign-in notice and no selectable Cursor inventory. This is a real missing-key guard, not a controlled rejected response. The supplemental composer uses the fresh server project, so its project/VCS context differs from the paired projectless draft; no cross-state diff or layout claim is made.
**Supplement steps and timestamps:** 0.01s — Recording started
3.41s — Settled frame: R4-supplemental-settings-error
3.41s — Settings: filter models `old-account-only-a`
7.93s — Settled frame: R4-supplemental-retained-A
9.75s — Settings: clear filter; show total and live models
9.75s — Click Refresh provider status
10.91s — Refresh pending state
13.09s — Refresh completed
16.44s — Settled frame: R4-supplemental-after-refresh
16.44s — Close Settings
28.25s — Supplemental missing-key guard: inspect composer; rejected-key row remains unverified
33.59s — Settled frame: R4-supplemental-picker
33.59s — Composer: search models `Old Account Only A`
38.19s — Settled frame: R4-supplemental-picker-stale-search
39.73s — Recording finished
| Before | After — head-only missing-key supplement | Diff0 | DiffT |
|---|---|---|---|
| Not required | [R4-missing-key-supplement.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b33b43ca62d08113/R4-missing-key-supplement.mp4)
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | N/A: head only | N/A: head only |
| Frame · 1440×1000 · dark | Before | After
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | Diff0 | DiffT |
|---|---|---|---|---|
| R4-attempt-settings-ready | N/A |  | N/A | N/A |
| R4-attempt-settings-A | N/A |  | N/A | N/A |
| R4-attempt-after-refresh | N/A |  | N/A | N/A |
| R4-supplemental-settings-error | N/A |  | N/A | N/A |
| R4-supplemental-retained-A | N/A |  | N/A | N/A |
| R4-supplemental-after-refresh | N/A |  | N/A | N/A |
| R4-supplemental-picker | N/A |  | N/A | N/A |
| R4-supplemental-picker-stale-search | N/A |  | N/A | N/A |
### Optional narrow Settings · 390×1000 · dark
Supplemental static frame, same outer scroll position (1150), filter cleared. Both real web apps use the browser’s narrow viewport with no mobile-device emulation. The only zero-threshold difference is the model total.
| Frame / viewport / theme | Before
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) | After
[ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | Diff0
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) | DiffT12
[50c1c5d](https://git.cafe/pingdotgg/t3code/commit/50c1c5dc536493826fc66e220598f38b831d5bde) → [ba75e85](https://git.cafe/pingdotgg/t3code/commit/ba75e8569ce10dde44a3459b0fc0b20ce69f36b1) |
|---|---|---|---|---|
| optional-390-models · 390×1000 · dark |  |  |  |  |
### What else changed
- Intended: the Settings total changes from 51 to 48; all three synthetic stale rows become “No models match.” The live Composer 2.5 row remains.
- Intended: stale composer search results become “No models found.” With optional hiding omitted, Retired Model X is visible on base and absent on head. The A display-name search also fuzzy-matches B on base.
- Cleared Cursor picker and restarted cleared picker are pixel-identical at zero threshold.
- R2-picker-Composer-2.5 was recaptured after proof audit pass 2 flagged two border pixels (2/255) in the first take: the recaptured before/after are byte-identical (0 changed pixels). The first take's difference reproduced on the same head build and disappeared after a popup remount, so it was Chromium raster history, not a product change ([reproduce.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4551c406e0d932aa/reproduce.md), [diff-metrics.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/303a1c518a738c03/diff-metrics.json)).
- No other settled-frame differences were detected outside the catalog count/search-result regions and the two border pixels above. R4 is head-only; its missing-key error banner, sign-in notice, and unavailable picker are supplemental state differences, not a base/head comparison.
### Sanitized cache and RPC excerpts
Only the matrix allowlist was published. Raw caches, settings, accounts, API keys, dev auth, pairing URLs and server logs were excluded. Cache persistence is verified separately from the UI, not substituted for a capture.
[seed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2f9efd395015d823/seed-sanitized.json)
[base-ready-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8fdeeb4f7c250628/base-ready-sanitized.json)
[base-refreshed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/421c0341521af21d/base-refreshed-sanitized.json)
[base-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0250a3fd7f90441c/base-reloaded-sanitized.json)
[base-refreshed-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/db9b4c181a85eab7/base-refreshed-reloaded-sanitized.json)
[base-restarted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62d1d8c6a30b3a0a/base-restarted-sanitized.json)
[base-final-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dd1000bc5619a755/base-final-sanitized.json)
[head-ready-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bc9891f7e6bcc5b6/head-ready-sanitized.json)
[head-refreshed-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2fb66fab758c6aac/head-refreshed-reloaded-sanitized.json)
[head-restarted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b432626d25abe3c0/head-restarted-sanitized.json)
[head-final-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/52bda6ea4c26e886/head-final-sanitized.json)
[guard-invalid-key-accepted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a19bf1b62de5af24/guard-invalid-key-accepted-sanitized.json)
[missing-refreshed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6c04444ca4c21f02/missing-refreshed-sanitized.json)
[invalid-key-probe-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5ad61552473c848/invalid-key-probe-sanitized.json)
### Seed and driver scripts
[server-driver.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/63996056847246a2/server-driver.py)
[seed-fixture.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0483798d0ce731f9/seed-fixture.py)
[freeze-clock.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5f28786983545db/freeze-clock.mjs)
[browser-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5df8e0a9bf85e4e8/browser-driver.js)
[walkthrough.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/959116b67f3c01cd/walkthrough.js)
[authenticate-preview.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b419edda7ac38c9c/authenticate-preview.js)
[sanitize-provider.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a4364aa76948f5ed/sanitize-provider.py)
[probe-invalid-key.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fd33e839bbe5a943/probe-invalid-key.mjs)
[make-diffs.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e152f34289a4c2ba/make-diffs.py)
[make-sheets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f3403086ca93a7f2/make-sheets.py)
[video-review.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/96c573d61e6c47e8/video-review.py)
[publish-assets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bfe4a88acf402f29/publish-assets.py)
[write-evidence.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05db98d5d954ecdd/write-evidence.py)
[reproduce.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/831cb55a0a719181/reproduce.md)
Timeline and frame provenance: [capture-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8de6e4488eedc58a/capture-manifest.json).
### Cleanup
All spawned dev server process groups were terminated using their captured IDs; final dev ports were unbound. The shared browser tab was closed. The extra base worktree was removed. Head worktree source is clean; no PR body edit, commit, push or source modification. Scratch remains at `/tmp/lead-28018-r1/evidence-capture/` for the lead. Disk remained 11 GB available.
FRICTION:
infra | The VM/edge accepted a deliberately invalid Cursor key, even in direct SDK calls; R4 rejected-key state could not be established | A transport that honors invalid-key rejection, or a separately authorized controlled harness.
tool | agent-browser CLI was absent; the shared T3 preview browser supplied recordings but downscaled PNGs and lacks reduced-motion emulation | A provisioned CLI with full-resolution PNG and reduced-motion controls.
### Verbatim ghdrop artifact output
[before-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/665b86a08dd0de6d/before-R1-R2.mp4)
[before-R1-R2-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6f0f3d1ad8ba3995/before-R1-R2-steps.json)
[after-R1-R2.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fa94bd385e1a8a84/after-R1-R2.mp4)
[after-R1-R2-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9b2668b5c8c5b645/after-R1-R2-steps.json)
[before-R3-full-walkthrough.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/415e6d241563a790/before-R3-full-walkthrough.mp4)
[before-R3-full-walkthrough-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b6ba7d76537004c/before-R3-full-walkthrough-steps.json)
[after-R3-full-walkthrough.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/24dcac71f825e4b0/after-R3-full-walkthrough.mp4)
[after-R3-full-walkthrough-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4b6d24fe9f06b1f7/after-R3-full-walkthrough-steps.json)
[R4-invalid-key-attempt.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8e709a377f147628/R4-invalid-key-attempt.mp4)
[R4-invalid-key-attempt-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5687ffde12ebf35d/R4-invalid-key-attempt-steps.json)
[R4-missing-key-supplement.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b33b43ca62d08113/R4-missing-key-supplement.mp4)
[R4-missing-key-supplement-steps.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4f4c7bf4e9891818/R4-missing-key-supplement-steps.json)
[seed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2f9efd395015d823/seed-sanitized.json)
[base-ready-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8fdeeb4f7c250628/base-ready-sanitized.json)
[base-refreshed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/421c0341521af21d/base-refreshed-sanitized.json)
[base-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0250a3fd7f90441c/base-reloaded-sanitized.json)
[base-refreshed-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/db9b4c181a85eab7/base-refreshed-reloaded-sanitized.json)
[base-restarted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62d1d8c6a30b3a0a/base-restarted-sanitized.json)
[base-final-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dd1000bc5619a755/base-final-sanitized.json)
[head-ready-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bc9891f7e6bcc5b6/head-ready-sanitized.json)
[head-refreshed-reloaded-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2fb66fab758c6aac/head-refreshed-reloaded-sanitized.json)
[head-restarted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b432626d25abe3c0/head-restarted-sanitized.json)
[head-final-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/52bda6ea4c26e886/head-final-sanitized.json)
[guard-invalid-key-accepted-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a19bf1b62de5af24/guard-invalid-key-accepted-sanitized.json)
[missing-refreshed-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6c04444ca4c21f02/missing-refreshed-sanitized.json)
[invalid-key-probe-sanitized.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5ad61552473c848/invalid-key-probe-sanitized.json)
[capture-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8de6e4488eedc58a/capture-manifest.json)
[diff-metrics.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7874eff24ab30eb7/diff-metrics.json)
[server-driver.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/63996056847246a2/server-driver.py)
[seed-fixture.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0483798d0ce731f9/seed-fixture.py)
[freeze-clock.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5f28786983545db/freeze-clock.mjs)
[browser-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5df8e0a9bf85e4e8/browser-driver.js)
[walkthrough.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/959116b67f3c01cd/walkthrough.js)
[authenticate-preview.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b419edda7ac38c9c/authenticate-preview.js)
[sanitize-provider.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a4364aa76948f5ed/sanitize-provider.py)
[probe-invalid-key.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fd33e839bbe5a943/probe-invalid-key.mjs)
[make-diffs.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e152f34289a4c2ba/make-diffs.py)
[make-sheets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f3403086ca93a7f2/make-sheets.py)
[video-review.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/96c573d61e6c47e8/video-review.py)
[publish-assets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bfe4a88acf402f29/publish-assets.py)
[write-evidence.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05db98d5d954ecdd/write-evidence.py)
[reproduce.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/831cb55a0a719181/reproduce.md)
[matrix-source.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/905c93544ea0d0fa/matrix-source.md)