# Proof audit pass 2

VERDICT SUFFICIENT — P1, P2, P3, P4, P5, P6, G1, G2, G3, C1, C2, C3 (12/12). No missing matrix proof rows.

Read-only evidence audit for [#18717](https://git.cafe/pingdotgg/t3code/pulls/18717), also [#18717](https://github.com/pingdotgg/t3code/pull/18717). This is evidence sufficiency for protocol selection, not a new code review or a successful publish/clone/network claim.

Reviewed scope: [7fd2e09e38](https://github.com/pingdotgg/t3code/commit/7fd2e09e381a61f427da09dd7a8f2c9c1558fe59) through [9456cd2a68](https://github.com/pingdotgg/t3code/commit/9456cd2a687586d9e9fcc827c33303bc2dad649f). Integrated checkout head: [48c105a776](https://github.com/pingdotgg/t3code/commit/48c105a776999d5d2ddaeac5b52febce8616ac92). Worked only against `/home/ubuntu/wt/pr-18717`, with audit artifacts outside it.

## Identity and integrity

Downloaded the [pass 1 matrix](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8fe241841b24b855/pass1-matrix.md), [evidence index](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/81e65986e8bf5a3a/evidence-index.md), and [published evidence bundle](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7dd8613cbd828fed/evidence-18717-scripts-and-transcripts.tar.gz).

All 37 bundle files match `/tmp/evidence-18717/public` byte for byte. All 36 entries in artifact-sha256.json verify. Each of the eight production blobs in source-manifest.json matches both its SHA-256 and the exact git-show blob at the declared revision. Inspected the overlay sources, loader transformations, driver, RPC client, fixture generation, test harness generation/configuration, test logs and module records, all six runtime transcripts and associated startup logs, boundary checks, and PID cleanup records.

The five changed scope files (service, core provider interface, GitHub adapter and two tests) are byte-identical at the integrated head and the captured head. The only additional tracked differences are ACP clientTerminals.ts and its test. The runtime pins the production ACP file too; the ACP test is outside the runtime graph. The before/after captures therefore have credible source identity without resetting the integrated checkout.

## Matrix audit

| Row | Result and evidence |
| --- | --- |
| P1 | Sufficient. Before and after real SSH config both select the SSH fixture URL. After records actual gh config stdout `ssh`, exit 0. |
| P2 | Sufficient. Before real HTTPS config selects SSH; after selects HTTPS. Independently replayed the affected after case and matched the URL and real gh output. |
| P3 | Sufficient. Both unset-config probes enumerate no config files and real gh reports `https`, exit 0. Before selects SSH, after HTTPS. This is distinct from mocked empty stdout. |
| P4 | Sufficient. Scoped tests enumerate omitted and literal auto, each with SSH and HTTPS preferences, asserting URL and lookup input. |
| P5 | Sufficient. Scoped tests establish explicit protocol against the opposite preference. Two temporary cases assert zero lookup calls with a lookup that throws if evaluated, plus the chosen URL. |
| P6 | Sufficient. Temporary cases separately exercise missing capability and explicit null, selecting SSH. |
| G1 | Sufficient. Exact host-specific argv is asserted. The temporary process fixture returns the opposite value without ghe.test, so global fallback would fail the assertions. This is test proof of host-specific command wiring, not a real GHE config runtime. |
| G2 | Sufficient. Successful empty and arbitrary non-SSH stdout select HTTPS in temporary tests; scoped tests cover empty output too. |
| G3 | Sufficient. Representative typed VcsProcessSpawnError is caught to null by the adapter; service null selects SSH. VcsProcess tests cover actual nonzero process rejection. This is the layered failure proof the matrix permits, not a runtime timeout/network simulation. |
| C1 | Sufficient. Scoped prepareClone covers auto HTTPS with a real temporary parent. Temporary cases separately exercise omitted and auto HTTPS using a scratch parent. |
| C2 | Sufficient. Explicit SSH/HTTPS prepareClone cases assert selected URL and zero preference calls; direct URL input stays unchanged even with explicit HTTPS. |
| C3 | Sufficient. Temporary provider-backed auto SSH case records SSH failure followed by HTTPS success; explicit SSH records one attempt and failure. Scoped direct URL retry controls also pass. Git execution is stubbed as required. |

## Independent reproduction

Copied the published run.py, loader.mjs and rpc-client.mjs into `/tmp/audit-18717-pass2/replay`, changing only the evidence scratch prefix. Created its workspace directory and used the published pinned blobs. Ran `python3 /tmp/audit-18717-pass2/replay/run.py` with its default after/HTTPS fixture.

The driver recreated the explicitly owned `/tmp/ev-18717` home, passed `--no-seed`, and supplied T3CODE_DEV_SEED=0. HOME, XDG directories, GH_CONFIG_DIR and Git global config were scratch-local. The environment was allowlisted; repository dotenv loading was disabled by the inspected loader. No live T3 data was read, seeded or copied.

Actual dev runner PID 2650920 spawned server PID 2651178. Startup confirmed `/tmp/ev-18717` and listening on 127.0.0.1:18717. The authenticated WebSocket request `proof-18717` reached the production publish service. Creation was intercepted before viewer/REST work. Actual gh PID 2651442 ran `config get -h github.com git_protocol`, returned `https\n`, exit 0. The unchanged resolver selected `https://github.com/proof-owner/proof-repo.git`, exactly matching published P2-after. The ensureRemote boundary recorded that URL and raised EVIDENCE_URL_SELECTED_STOP before remote mutation or push. The RPC returned the expected sentinel defect; it did not report publish success.

Also independently reran the pinned test configuration: 3 files / 87 cases passed (59 service+adapter and 28 VcsProcess). The scratch temporary harness passed 2 files / 16 cases. Total: 103 unique cases independently passed, not double-counting earlier runs. Repeated the four boundary assertions: external socket, gh API POST, git push and git remote add all denied before effects. No typecheck, repo-wide check or browser run was performed. Pixel delta and screenshots are inapplicable to this nonvisual proof.

All original evidence PIDs and the three replay PIDs were checked absent. Replay driver exited 130 on intentional shutdown. Port 18717 is free. Worktree remains clean at the integrated head. No source edits, pushes, comments, review posts or watches. Required T3 PR registration was confirmed.

[Independent replay, hash audit, test logs and adapted driver](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ac81e77f94c59d45/pass2-audit-evidence.tar.gz).

## FRICTION and limits

- Main was merged during the original capture. Exact blob comparisons and the inspected four-file production overlay resolve that evidence identity issue for this scope; no checkout reset was needed.
- The published driver assumes prepared overlay files and an existing scratch workspace directory. I prepared those explicitly in the new scratch directory. This is a setup detail, not a missing behavior result.
- One bundle download initially failed DNS resolution; a bounded retry succeeded and full bundle integrity was verified.
- Original fork commit provenance remains unresolved, as pass 1 disclosed. The evidence uses the matrix's explicit mergebase baseline and does not claim that original commit is the baseline.
- These artifacts establish URL selection and the named regression controls. Repository creation, real clone/push, real GHE configuration, and all possible process failures are outside the proof claim.

Retained scratch paths: `/tmp/audit-18717-pass2` (including private raw startup logs and the replay driver), `/tmp/ev-18717` (fresh replay server state). Prior evidence paths `/tmp/evidence-18717` and its public subdirectory were read without modification. No servers remain running from this audit.

Model/harness: gpt-6.1-sol through Codex in T3 Code.

VERDICT SUFFICIENT — P1–P6, G1–G3, C1–C3. FRICTION as disclosed above; no missing proof rows.