# Runtime evidence index for PR [#26601](https://git.cafe/pingdotgg/t3code/pull/26601)

Before [30eb7e7bb1](https://git.cafe/pingdotgg/t3code/commit/30eb7e7bb1ef103fdd6f54081b6a4acf66b3ee4c); after [3c6d27fa7c](https://git.cafe/pingdotgg/t3code/commit/3c6d27fa7c98ab98a23463891452f761aedbdea8).

14/15 required rows captured on native Linux. R15: `cannot-verify windows`; recommended macOS corroboration: `cannot-verify macos`. Server-only: no rendered surface, screenshots, browsers, dev servers, viewport/theme/image diffs, or mobile devices. Optional Preparing workspace UI corroboration was explicitly out of scope.

Environment: fs-40; Linux kernel 6.1.102; Node v26.13.0; Git 2.43.0; installed @effect/platform-node-shared 4.0.5; 4 available CPUs. Every final paired transcript prints the full revision, wall origin, driver input options and monotonic milliseconds; raw logs retain the actual native spawn options and events.

Identical final runtime driver SHA-256: `ebc4c041c767f7756be00ab0c77dd2e44af336520baad6ae51f8e2f005f60460`. Fixture helper SHA-256: `f7f10c819bdb0bbb8a004b05d04b205406b9b64b11e0e9fbfc128f8a39454cf9`.

Protocol: GitVcsDriver.layer + NodeServices.layer + ServerConfig.layerTest, real git and fresh synthetic committed repositories. A passive spawner wrapper delegates to the native spawner unchanged and logs its options/PID/finalization. A passive process.kill wrapper logs actual group signals and delegates unchanged. Python helpers are invoked by real git aliases, commit hooks, or a real local-origin upload-pack. No fake spawner, platform, timer, or TestClock. READY uses fixture IPC; cancellation follows observed requests. A one-shot native timer observes R08 through its natural completion checkpoint. No timing assertions were added to the repository.

For final core runs, seed commit dates are fixed; file data is identical on both sides. Runtime PIDs, paths, wall origins, later commit timestamps/hashes and small ordinary-command timing jitter are incidental run identities, not behavior changes. R01 carries the entire exact head test file to an untracked baseline overlay, preserving identical regression body and setup.

## R01 — focused red/green regression

| Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|
| Exactly 1 selected test fails: expected marker false, received true. | Exactly 1 selected test passes: marker false. |

171 unrelated tests are skipped by the name filter on each side. Baseline production code is untouched. Raw focused logs and exact overlay are uploaded separately.

## R02

Exhausted eight-permit pool and queued createWorktree: existing-branch A and fresh-success B, solo controls and eight recovery probes.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| A | solo 167.9ms; holders 8098.3–8252.8ms, timed-out 8/8; queued 7936.2ms (branch_already_exists); markers 8, live 0, recovery 8/8 | solo 229.2ms; holders 2022.2–2099.6ms, timed-out 8/8; queued 1796.4ms (branch_already_exists); markers 0, live 0, recovery 8/8 |
| B | solo 204.1ms; holders 8126.1–8248.6ms, timed-out 8/8; queued 8043.8ms (success); markers 8, live 0, recovery 8/8 | solo 218.1ms; holders 2021.2–2038.6ms, timed-out 8/8; queued 1941.0ms (success); markers 0, live 0, recovery 8/8 |

## R03

Eight READY holders; actual ninth REQUEST observed before interruption. Omitted/30000 stay pooled; 31000/null bypass.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| undefined | 9th 7984.8ms; starts before interrupt=False; cleanup 8026.5ms; markers 9 (includes natural ninth probe), live 0, recovery 1/1 | 9th 1124.9ms; starts before interrupt=False; cleanup 1145.9ms; markers 1 (includes natural ninth probe), live 0, recovery 1/1 |
| 30000 | 9th 8001.1ms; starts before interrupt=False; cleanup 8022.2ms; markers 9 (includes natural ninth probe), live 0, recovery 1/1 | 9th 1100.3ms; starts before interrupt=False; cleanup 1113.5ms; markers 1 (includes natural ninth probe), live 0, recovery 1/1 |
| 31000 | 9th 66.3ms; starts before interrupt=True; cleanup 8022.3ms; markers 9 (includes natural ninth probe), live 0, recovery 1/1 | 9th 72.8ms; starts before interrupt=True; cleanup 1111.5ms; markers 1 (includes natural ninth probe), live 0, recovery 1/1 |
| null | 9th 78.6ms; starts before interrupt=True; cleanup 8009.9ms; markers 9 (includes natural ninth probe), live 0, recovery 1/1 | 9th 94.7ms; starts before interrupt=True; cleanup 1116.6ms; markers 1 (includes natural ninth probe), live 0, recovery 1/1 |

## R04

31,000ms actual timeout on a 40,000ms hostile alias; concurrent short pooled probe.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| 31000 | timeout 40059.2ms, Git command timed out.; pooled probe 8.8ms; markers 1, live 0 | timeout 32020.2ms, Git command timed out.; pooled probe 10.3ms; markers 0, live 0 |

## R05

Explicit interruption of default-timeout and null-timeout aliases after READY; await interrupt and owning fiber Exit separately.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| undefined | interrupt 8014.2ms; Exit Failure containing Interrupt; markers 1, live 0, recovery 8/8 | interrupt 1021.3ms; Exit Failure containing Interrupt; markers 0, live 0, recovery 8/8 |
| null | interrupt 8015.0ms; Exit Failure containing Interrupt; markers 1, live 0, recovery 8/8 | interrupt 1019.5ms; Exit Failure containing Interrupt; markers 0, live 0, recovery 8/8 |

## R06

Real commit -a holds index.lock in a cooperative pre-commit hook; timeout and interruption; subsequent real commit.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| timeout | index.lock 1→0; timeout 1019.262ms; post-READY through subsequent commit 978.6ms; subsequent commit success=True; remaining locks=[], live 0 | index.lock 1→0; timeout 1014.716ms; post-READY through subsequent commit 969.9ms; subsequent commit success=True; remaining locks=[], live 0 |
| interrupt | index.lock 1→0; interrupted; post-READY through subsequent commit 32.1ms; subsequent commit success=True; remaining locks=[], live 0 | index.lock 1→0; interrupted; post-READY through subsequent commit 37.1ms; subsequent commit success=True; remaining locks=[], live 0 |

## R07

Nine 3000ms leaf controls: exit 0, allowed 17, structured-error 17 at 10000/31000/null; fast status and eight recovery probes.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| 10000-zero | 3078.7ms; success, exit 0; fast 21.0ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3074.6ms; success, exit 0; fast 19.4ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| 10000-allowed17 | 3102.4ms; success, exit 17; fast 16.3ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3072.2ms; success, exit 17; fast 11.6ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| 10000-error17 | 3104.9ms; GitCommandError, exit 17; fast 13.1ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3101.8ms; GitCommandError, exit 17; fast 20.6ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| 31000-zero | 3071.4ms; success, exit 0; fast 16.3ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3087.9ms; success, exit 0; fast 6.8ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| 31000-allowed17 | 3080.6ms; success, exit 17; fast 10.2ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3068.5ms; success, exit 17; fast 14.5ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| 31000-error17 | 3081.7ms; GitCommandError, exit 17; fast 11.1ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3100.5ms; GitCommandError, exit 17; fast 10.6ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| null-zero | 3101.8ms; success, exit 0; fast 18.6ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3072.1ms; success, exit 0; fast 15.5ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| null-allowed17 | 3137.5ms; success, exit 17; fast 41.0ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3114.0ms; success, exit 17; fast 10.8ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |
| null-error17 | 3112.7ms; GitCommandError, exit 17; fast 7.0ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 | 3093.3ms; GitCommandError, exit 17; fast 18.3ms; markers 1, live 0; original OUT/ERR preserved, recovery 8/8 |

## R08

Real git alias leader exits 0/allowed17/disallowed17 while same-group TERM-ignoring child survives; sample return and READY+8250ms checkpoint.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| zero | return 1116.0ms, exit 0; immediate live 1, markers 0; natural checkpoint live 0, markers 1 | return 1148.5ms, exit 0; immediate live 0, markers 0; natural checkpoint live 0, markers 0 |
| allowed17 | return 1152.1ms, exit 17; immediate live 1, markers 0; natural checkpoint live 0, markers 1 | return 1121.4ms, exit 17; immediate live 0, markers 0; natural checkpoint live 0, markers 0 |
| error17 | return 1115.3ms, exit 17; immediate live 1, markers 0; natural checkpoint live 0, markers 1 | return 1122.1ms, exit 17; immediate live 0, markers 0; natural checkpoint live 0, markers 0 |

## R09

128-byte output cap, null timeout; overflow fails while hostile helper runs; truncating control completes naturally at 3000ms.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| false | 8061.9ms; Git output exceeded 128 bytes and was truncated.; markers 1, live 0 | 1074.0ms; Git output exceeded 128 bytes and was truncated.; markers 0, live 0 |
| true | 3072.4ms; success; stdoutTruncated=True; markers 1, live 0 | 3085.6ms; success; stdoutTruncated=True; markers 1, live 0 |

## R10

Real local-origin fetch with controlled upload-pack; two status callers join one background fetch, return after 5s while fetch continues to 8s.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| joined | callers 5289.6, 5087.0ms; fetches 1; helper live at caller return 1; final markers 1, live 0 | callers 5295.9, 5137.4ms; fetches 1; helper live at caller return 1; final markers 1, live 0 |

## R11

Real local-origin fetch helper ignores TERM and would finish at 310s; actual native 300s safety timeout, escalation, cooldown and a different key probe.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| safety | caller 5397.2ms; helper live at caller return 1; final live 0, markers 0; cooldown fetch spawns 0; different-key success True | caller 5353.3ms; helper live at caller return 1; final live 0, markers 0; cooldown fetch spawns 0; different-key success True |

## R12

Four distinct local-origin fetch helpers, fifth queued; caller interruption preserves all four, service-scope close kills them, pooled git remains independent.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| scope | service close 4095.7ms; live after caller interrupt 4; fifth READY 0; final live 0, markers 0 | service close 4093.2ms; live after caller interrupt 4; fifth READY 0; final live 0, markers 0 |

## R13

Eight READY pooled holders; ninth actual REQUEST observed, then cancelled before acquire. Zero ninth spawn/READY/marker; eight recovery probes.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| queued | queued interrupt 1.5ms; ninth spawn/READY/marker 0/0/0; recovery 8/8; holder markers 8, live 0 | queued interrupt 1.2ms; ninth spawn/READY/marker 0/0/0; recovery 8/8; holder markers 0, live 0 |

## R14

Two linked worktrees, public config writes prime common-dir path cache; hostile serialized writer blocks second write, actual timeout and interrupt variants.

| Variant | Before 30eb7e7bb1 | After 3c6d27fa7c |
|---|---|---|
| timeout | second writer 8030.4ms, success=True; config=yes; config.lock 0→0; hostile markers 1, live 0 | second writer 1973.9ms, success=True; config=yes; config.lock 0→0; hostile markers 0, live 0 |
| interrupt | second writer 8023.7ms, success=True; config=yes; config.lock 0→0; hostile markers 1, live 0 | second writer 1035.0ms, success=True; config=yes; config.lock 0→0; hostile markers 0, live 0 |

## What else changed / limits

- R02: hostile holder completion and queued worktree recovery accelerate; timeout details, branch-already-exists classification/operation, fresh worktree success and eight-probe recovery remain correct. Forced hostile fixtures produce eight natural markers before and zero after.
- R03/R05/R13/R14: hostile cleanup releases process permits/common-dir writer serialization earlier. Omitted/30000 stay pooled; 31000/null bypass; cancelled queued commands never spawn. Baseline hostile fixtures reach natural marker completion; after fixtures do not.
- R04: long bypassed command now returns near 32s instead of 40s, with the same timeout error; short pooled probe remains independent.
- R08: normal leader exit also changes cleanup. Before, descendant remains alive after the return and writes its marker at 8s. After, SIGTERM is followed by SIGKILL near 1s; zero live descendants/markers at both return and natural checkpoint. Exit 0, allowed 17 and rejected 17 mappings are preserved. The claim that normally exiting commands never reach cleanup is too broad.
- R09: output-overflow failure now finalizes around 1s instead of 8s with the same bounded-output error. Truncating mode remains a successful 3s command.
- R06/R07: cooperative real-lock cleanup, later commit success, stdout/stderr, allowed/disallowed exit mappings, three-second leaf survival and short-command latency have no material policy regression.
- R10/R11/R12: background fetch already had the one-second escalation and remains parity. Two callers coalesce; the 5s caller wait does not kill the fetch; native 300s safety timeout still escalates and records cooldown; four-worker shutdown kills all helpers. Measured R12 service-scope close is about 4.1s on both revisions: four finalizers close serially, exceeding the matrix’s proposed aggregate 1–2.5s target. This is observed pre-existing behavior, not silently treated as passing that target.
- Native Windows and macOS are unverified. Kernel-uninterruptible tasks and guaranteed SIGKILL lock removal are not claimed. Hostile aliases do not own real Git locks; only R06 proves cooperative cleanup of a genuine Git lock.

## Raw evidence and scripts

See the uploaded link manifest accompanying this index for every transcript, the six final raw logs, R01 red/green logs, drivers, and the complete raw-attempt archive. The archive retains preliminary failed capture-harness attempts; final evidence uses the single final driver hash above. Preliminary harness failures were Effect.interrupt returning void and an attempted call to a private helper; neither changes tracked production code.


Inputs are printed in each paired transcript from the exact uploaded driver; see inputs.json for the full matrix. The post-run audit separately records every tracked PID state, raw process-group existence and remaining *.lock paths. Zero live descendants in row captures excludes zombies and does not assert raw group disappearance.

## R15 — native Windows

| Before 30eb7e7bb1 | After 3c6d27fa7c | Verdict |
|---|---|---|
| unavailable | unavailable | `cannot-verify windows`: Linux VM, no native Windows execution. |

macOS R01/R02/R06 corroboration: `cannot-verify macos`; no native macOS host used.

## Uploaded files (verbatim ghdrop output)

[driver-v3.test.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/79f4d1010da5c96d/driver-v3.test.ts)
[fixture26601.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bf8ecfa66e68824b/fixture26601.py)
[r01-exact-head-test-overlay.test.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56ad889ba991934e/r01-exact-head-test-overlay.test.ts)
[r01-before-exact.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/925d4333cf79194e/r01-before-exact.log)
[r01-after-exact.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3c4c73c3fe330ee4/r01-after-exact.log)
[driver-v1.test.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3f99f81fc4f5404b/driver-v1.test.ts)
[driver-v2.test.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/06af008e507dcd20/driver-v2.test.ts)
[make-r01.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ecabf6b032c6a701/make-r01.py)
[r01-overlay.test.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2a90c5374465b2a6/r01-overlay.test.ts)
[summarize.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2c9c8a0d423a48d5/summarize.py)

[R01-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/09db849e81d4d9ae/R01-transcript.md)
[R02-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0cb4483729a9f07f/R02-transcript.md)
[R03-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c58ea78d304857b2/R03-transcript.md)
[R04-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72f6e8993a3ebf36/R04-transcript.md)
[R05-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/41286fe3a1ada1a6/R05-transcript.md)
[R06-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3f42d479c2de2cc9/R06-transcript.md)
[R07-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/347ffc2ceccfdf88/R07-transcript.md)
[R08-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d6c3337be3b13601/R08-transcript.md)
[R09-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a5770652987cec0a/R09-transcript.md)
[R10-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2165ac428467c86f/R10-transcript.md)
[R11-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ff3bec017bcbd706/R11-transcript.md)
[R12-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8add12aa93364571/R12-transcript.md)
[R13-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a4226495fce030cf/R13-transcript.md)
[R14-transcript.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/247d2a7f58648211/R14-transcript.md)
[final-core-before.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8f8b95e83bbde8bd/final-core-before.raw.log)
[final-core-after.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4a516d480b0b4164/final-core-after.raw.log)
[final-background-before.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/962f59fc946828a6/final-background-before.raw.log)
[final-background-after.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3b44fffe92c5be08/final-background-after.raw.log)
[final-r11-before.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bebe8221fe05210b/final-r11-before.raw.log)
[final-r11-after.raw.log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/50fd641878db175c/final-r11-after.raw.log)
[inputs.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d6ae11a6d2aa0f6c/inputs.json)
[post-run-audit.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b4744832302fdf0f/post-run-audit.json)
[finish-evidence.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a1577ab9d7394f8c/finish-evidence.py)
[raw-attempts.tar.gz](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/17026be211898149/raw-attempts.tar.gz)