Unverified rows and branch limits:

- F15 (partial): undefined/false pending-work probes have recordings. A failing/defecting probe is unverified; the matrix identifies no existing focused failure fixture, and no live failure injection was made.
- F16 (unverified): transient registry lookup failure while an existing runtime is cached needs registry injection. No focused existing fixture is available; removing a real instance does not reliably select this branch.
- F17 (required minimum captured): both stopped-start controls pass. Failed/interrupted compact cleanup remains an additional branch gap.
- F18 (unverified): rollback failure/interruption cleanup needs an injected failing/interrupted adapter. No focused existing fixture is available. Successful rollback and released-runtime races are independently recorded as F12/F13.
- F19 (partial): hanging-close/release-record retry/replacement/credential controls pass. Full settings-change integration with all cleanup failure/timeout modes is unverified.
- F21 (required minimum captured): auth blocking and shared-peer sign-out interruption pass. A repeated open after mutating guard state on the same cached wrapper remains unverified.
- F22 (required minimum captured): shared/exclusive behavior and independent instance routing pass. No live second-instance or non-Codex native-resume claim is made.
- F23 (partial): interrupted mid-handshake cleanup passes. The complete stale release → replacement launch failure → repaired-config recovery sequence is unverified.
- F24 (partial): missing/file/deleted workspace and empty-history compaction rejection pass. Unsupported-compaction capability and zero-run rollback branches are unverified.
- F26 is excluded. External auth-file-only switching is never claimed fixed.