# Final read-only proof audit

**Findings: no remaining minimal-matrix proof objection. Overall: SUFFICIENT at the requested pinned source.** N3 is cleared by the supplemental native recording and transcript. This verdict preserves the established rows; it does not certify subsequent source changes.

PR [#24440](https://github.com/pingdotgg/t3code/pull/24440), issue [#7212](https://git.cafe/pingdotgg/t3code/issues/7212), pinned [69c6d53c30](https://github.com/pingdotgg/t3code/commit/69c6d53c30d974da83f21ed5d9142dc7afd5f224). Audit 2026-10-25 UTC.

| Row | Final status | Basis |
|---|---|---|
| P1 | RETAINED / accepted | Established protocol/status proof, unchanged audit scope. |
| N1 | RETAINED / accepted | Established exact independent native failed-frame proof; no reconstruction repeated. |
| N2 | RETAINED / accepted | Pass2 accepted native Retry/recovery/input lineage. |
| N3 | PASS | New native Close → physical composer click/type → retained same tab → recovery/re-float. |
| N4 | RETAINED / accepted | Established native continuation/persistence. |
| S1 | RETAINED / accepted | Pass2 connected agent-owned failure/control proof. |
| S2 | RETAINED / accepted | Pass2 takeover/Retry/refusal/recovery/input/Release. |
| S3 | RETAINED / accepted | Pass2 connected Close/chat/tab/recovery/re-float. |
| S4 | RETAINED / accepted | Pass2 visible wide positional drag and chat input. |
| S5 | RETAINED / accepted | Pass2 narrow/dark movement, resize and reachable ownership controls. |

## N3 observations

Independently downloaded and decoded the [8.966667s whole-app recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/600a55d182827ec1/native-N3-wide-light.mp4) with ffmpeg end-to-end, exit0. Inspected 2fps whole-app decoded frames and original-resolution typed/re-floated endpoints. Dimensions1440×900,30fps,554688bytes. This is sampled visual inspection, not a claim of manually viewing every encoded frame. SHA256343b21191aabc59bcc72cb98694b6be9d80553f375e80e487337178e9a532047 matches archive manifest; transcript hash also matches. Acceptance rests on visible interactions and driver review, not hashes alone.

The clip visibly starts with the actual refused native float, moves it left, closes it, shows progressive keyboard text in the exposed composer, then restores healthy native content and re-floats. The [sanitized archive](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/67c6721caab5863a/native-N3-sanitized-drivers.tar.gz) capture.mjs uses xdotool mousemove/click/type for Close, composer, panel, Refresh and Float. Its CDP library has other input helpers, but those are not called for the tested composer interaction. No DOM value assignment or synthetic DOM input substitutes for this proof.

Transcript: failed shell moves to x1048,y568,w320,h320; physical click point1083,774 lies inside those prior bounds. After Close, the driver separately checks that point lies inside the expanded composer, then physically clicks and types. At06:44:30.911Z exact composer text is “N3 native X11 hit-test reaches uncovered chat composer.” and activeElement is composer-editor. The visible text grows progressively in decoded frames. This resolves the specific native guest hit-testing gap; requiring the point to be inside the pre-Close shrunken composer would be incorrect because Close expands it.

The full compound data-preview-tab remains identical in all transcript marks, ending in tab_1_5f0621c1-d5cd-4349-9d6f-893dc36c8659. Native webview stays retained offscreen at−100000,−100000 after Close. Same URL http://127.0.0.1:59999/ recovers to title Healthy preview at06:44:32.439Z, then same tab re-floats at06:44:33.558Z. The brief panel transition is corroborated by transcript; retained panel/recovery path was already accepted, and final healthy re-float is plainly visible. No new native page-input requirement is added to N3; N2 already covers that.

![Native Close, physical composer input, retained-tab recovery and re-float](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/600a55d182827ec1/native-N3-wide-light.mp4)

## Provenance and limits

Read repository AGENTS and supplied [matrix](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d4911d7cd69fcf26/REPORT.md), [pass2 audit](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e6b059111707147a/PASS2-REPORT.md), and [supplemental report](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f9504f250e3becf6/REPORT.md). Initial checkout HEAD exactly matched the pin and tracked status was clean. Origin is GitCafe; cafe pr list --head fix/issue-7212 independently reported the requested head and draft PR.

launch.mjs starts actual worktree Electron dist-electron/main.cjs through headless-desktop, isolated scratch T3 home/XDG directories and synthetic fixture copies; removes VITE_DEV_SERVER_URL/VITE_HTTP_URL/VITE_WS_URL and ELECTRON_RUN_AS_NODE. CDP target selection is t3code:, observations use actual webview getURL/getTitle/isLoading, setup navigates through desktopBridge.preview.navigate with a real listener stopped to cause refusal. Recording is ffmpeg x11grab with pointer. Source Electron dependency is44.9.3. Rendering environment is Linux/X11,1440×900 light, --no-sandbox --disable-gpu; it is not connected stream evidence. Report supplies build success and cleanup lineage. Retained desktop/web artifacts timestamp06:42, preceding06:44 capture. Pinned source ThreadPreviewMiniPlayer passes visible=false on failure to BrowserSurfaceSlot, consistent with observed offscreen native guest. No rebuilt binary/source cryptographic attestation is claimed or newly required.

During the audit another actor moved the worktree to [b280645e16](https://github.com/pingdotgg/t3code/commit/b280645e16401e7fd20851024d53d5a9fd39fcc2), a06:46:23 merge of origin/main. Reflog confirms the requested pin as its previous HEAD. I did not reset or modify it. Later source reads explicitly used git show at the requested pin. The retained build timestamps precede that merge. This verdict applies to the pinned capture/source, not the later merge, which changes preview files. Worktree retained for lead, tracked status clean at final read.

## FRICTION

- urllib public downloads returned HTTP403; curl with Mozilla user agent succeeded. No credentials changed.
- cafe pr view rejected a branch argument (“pull request must be a positive number or GitCafe URL”); corrected with read-only branch-filtered list. No forge writes.
- Historical-base diff was noisy due repository history drift; discarded, without widening scope. One guessed BrowserSurfaceSlot path was absent; located actual browser/ path and read pinned source explicitly.
- Concurrent worktree merge disclosed above; no source or process mutation by this audit.
- No servers, browsers, captures, tests, edits, push, public comments, watches or merges performed. Required app-local PR linking/listing succeeded; watching=false. ghdrop used only to upload this report. Own scratch removed after upload; worktree and existing build artifacts retained.

Model/harness: gpt-6.1-sol / Codex in T3 Code.