# Proof audit pass 3

Reviewed [#24209](https://git.cafe/pingdotgg/t3code/pulls/24209) for [#24203](https://git.cafe/pingdotgg/t3code/issues/24203), supplied base [27e0c68](https://git.cafe/pingdotgg/t3code/commit/27e0c684c585f955252d65f06206dd11a143bff5) and head [7e3da10](https://git.cafe/pingdotgg/t3code/commit/7e3da10cb536358f9b756300c58c82f14663e151). No missing or contradicted mandatory proof row remains.

The complete supplied base/head diff is one aria-label replacement in SidebarBrand: Go to threads → T3 Code home. Classes, children, href, handlers, contracts and navigation behavior are unchanged. The reviewed head merges the contributor's original commit onto the supplied base. GitCafe still reports original head [4bc10a4](https://git.cafe/pingdotgg/t3code/commit/4bc10a4478a84f51f3610191940eab1ef2ecdfea), targeting main; SidebarChrome is identical between that commit and the supplied head. Thus this is sufficient proof for the supplied integrated revision, not a claim that the integrated head was pushed or that current CI is green. No merge-readiness certification was requested or performed.

Read test-t3-app, all capture drivers/replay notes, original matrix and previous audit. Inspected all 135 local PNGs, including every raw capture and both diff forms, in labeled sheets. Independently decoded all 12 MP4s into six samples each and opened every sample sheet; added R1 samples around collapse/reopen. Desktop probe PNG was inspected but is not accepted as row evidence. Read computed-name/native AX, href, focus, environment, destination, readiness, collapse and reopen snapshots.

Downloaded all 227 current local artifacts referenced by the canonical browser manifest and supplemental desktop/Nightly indices; every downloaded file matches its local SHA-256. Historical superseded browser URLs are excluded deliberately. Detailed results are in remote-check.json.

## Row dispositions

- R1 PASS: current expanded sidebar, light/plain, keyboard focus and Enter to draft; pointer activation from draft reuses it; collapse excludes the link and refuses focus, reopening restores it. Both recordings visibly contain the collapsed and reopened states.
- R2 PASS: legacy sidebar, exactly 768 CSS pixels, dark Dev artwork, focused brand and pointer activation to draft. Retained corrected stills have matching focus appearance.
- R3 PASS: supplemental actual Nightly/dark Settings captures, focused link, Enter activation to draft on both revisions. Old Dev Settings captures remain valid additional caller evidence, not Nightly evidence.
- R4 PASS, limited to actual Linux Electron 44.9.3 / Chromium 152, 1440×900 content/native window, DPR 1. Native AX exposes the old/new names. Bridge is active; clientPlatform=linux; electron/wco classes and actual window controls appear. Focus and Enter work in the shared drag-region header and reach the same draft. Electron loads localhost:6285 over HTTP and uses hash routing: literal href /#/ on both revisions. This is explicitly disclosed and acceptable Linux desktop runtime proof, not packaged-origin or Windows/macOS proof.
- S1 PASS: 390×844 narrow drawer; no exposed brand link in either AX tree and toggle retained. Before observes an already-open drawer; after records opening. No new narrow brand action is claimed.
- S2 PASS: focused Dev artwork/light, name snapshots and identical visuals.
- S3 PASS: focused real Nightly artwork/light and name snapshots. Captured in Settings instead of a thread; this is adequate for the artwork/name row because SidebarChromeHeader and backdrop are shared, while R1/R2 separately establish the thread callers.
- S4 PASS: Dev pill/dark remains separate from the link name, with identical focused appearance.
- S5 PASS: dedicated secondary environment, connected, live, bootstrapped and ready; projectCount=0 on both revisions. Root visibly renders the actual NoProjectsHero. Plain/light name and href snapshots match the requested empty state, and no draft is claimed. Temporary project was added/removed through UI only; primary fixture was preserved.
- R5 conditional UNVERIFIED: hosted disconnected runtime is not claimed and is not required.

Source consistency: current, legacy and Settings branches all call SidebarChromeHeader; Electron adds drag-region, with a separate macOS inset. hidden md:flex excludes the brand below 768; collapsed offcanvas is inert. The width probe is aria-hidden and contains no Link. Root chooses a data-dependent draft or NoProjectsHero after bootstrap, so href and final route must be distinguished. VITE_HOSTED_APP_CHANNEL is a real supported branding input in branding.ts; the Nightly driver changes normal client preferences and reads readiness, never assigns stage or connection/project state. Native mobile uses a separate UI. Auth callbacks/pair/standalone prompt landing bypass the shell. Palette, new-thread keybindings, MCP, scheduled tasks and providers have no affected action or contract. Local/remote/relay/tunnel and multiple environments share this unchanged link; no separate transport proof is needed. Light/dark representatives cover system-selected appearance. Windows/macOS runtime and screen-reader speech remain explicitly unverified, as allowed.

## Pixels and independent rebuild

All ten delivered comparisons (nine mandatory fixtures plus extra Dev R3) independently recompute to zero changed RGB pixels, maximum channel delta 0, and zero pixels >16/255. All twenty within-phase frame1/frame2 settling comparisons also recompute to zero. Both difference forms per pair were opened: absolute RGB difference amplified 8× and max-channel >16 mask; all black. No image masks or exclusions were applied.

Browser wide captures are 1440×900 CSS / 1280×800 PNG; R2 is 768×800 CSS / 1280×1333 PNG; S1 is 390×844 CSS / 780×1688 PNG. Electron is 1440×900 CSS and PNG. Per-pair clock, theme, DPR, loaded system-font stack and reduced-motion conditions match. Real font-file identification and speech are not inferred from computed CSS/AX.

Independent rebuild used own collaborative tab tab_6_dc527165-46cd-40c1-a47d-e2add5bc57fc and existing lead localhost:6285, no new server. Source was bracketed by exact supplied-head reads and clean git status. Reused driver stabilization and R1 scaffold with output redirected exclusively here: light/plain/current, original thread route, 1440×900 CSS, clock 1792835400000, loaded fonts, focus-visible brand, no details panel. Final frame pair settled strictly and final rebuild vs delivered R1-after-frame2 is **0 / 1,024,000 changed RGB pixels; max delta 0; zero >16/255**. Opened comparison and both independent diffs. Name snapshot independently reads T3 Code home, href /, focused=true, focusVisible=true.

Initial rebuild had 65 changed pixels (max138; 45 >16), entirely in sidebar relative-time text: 2m versus 38m. useNowMinute had cached real time before Date was frozen. Navigating to Settings and returning remounted the sidebar under the already-frozen clock; final retained result is exact zero. No timestamp text or application state was spoofed, and the initial mismatch is not attributed to the PR.

![Delivered head at left; independent reviewed-head rebuild at right](/tmp/issue-24203-audit-final/independent-comparison.png)

## Prior findings and changes

R4 missing runtime proof is closed by actual Electron native AX/stills/activation recordings. R3/S3 missing Nightly is closed by the supported real Nightly channel and artwork snapshots. S5 missing ready empty state is closed by actual connected zero-project readiness snapshots and hero captures. Superseded R2 uploads are explicitly excluded by the canonical manifest; retained URLs identify corrected files. Historical browser replay notes still say R4/Nightly were unverified at that earlier capture stage; supplemental indices replace those coverage claims. No implementation change beyond the original name correction was introduced; the changes since pass2 are evidence, drivers, dedicated fixture setup and canonical artifact bookkeeping.

No children, implementation edits, checkout, push, comment, merge, tests, provider turns or server startup during this audit. PR registered to this thread as required. Existing server retained. Only scratch evidence under this audit directory and normal isolated browser pairing/preferences were written.

FRICTION pairing | own tab required isolated authentication | mint a fresh sandbox token and submit normal pairing form; keep credentials private.

FRICTION cached clock | initial replay retained a pre-freeze useNowMinute value, producing 65 unrelated timestamp pixels | freeze before first sidebar subscription, or remount after freezing; retain only the exact settled replay and disclose the rejected attempt.

FRICTION tooling | scratch inspect.py shadowed Python's stdlib inspect during numpy import | renamed scratch driver proof_audit.py; no repository impact.

FRICTION forge revision | GitCafe reports original contributor head while proof targets a local merge head | identify both SHAs and compare changed component; do not imply the integrated revision is pushed.

VERDICT: SUFFICIENT for the supplied base/head proof matrix. Missing or contradicted mandatory rows: none. R5 conditional, Windows/macOS runtime and screen-reader speech remain unverified within the allowed scope.