Issue 21730: server-only delegation evidence
This file supersedes /tmp/21730-runtime.txt.
Environment: Ubuntu 24.04.5 LTS, systemd 255 (255.4-1ubuntu8.17), cgroup v2. Runtime logs were captured by the lead in the browser terminal of a real T3 development app using isolated development state. This evidence task did not start a server/browser, seed data, or capture new runtime output.

Revisions:
Baseline: 3b95e7831b11b17627dff16843bc087bfca397ec
Red regression-test commit: 7e3b309b0353a334f478c5a726a1465709b90d30
Implementation: 9e4abdd846d7914648c5aec2e2820b8f7517e702
Final merged main head: 74c4ffc4ca044c6bfb63cb203237a6aacb3b238c
Worktree: /home/ubuntu/wt/issue-21730 (clean at final head during evidence assembly)

Provenance: BEFORE ran on baseline. AFTER was captured before the implementation commit, while the exact implementation subsequently committed as 9e4abdd846 was uncommitted (lead-provided provenance). It was not a runtime capture on the final merge. The existing green test log is from the final merge (lead-provided provenance).

Verified scope-file equivalence, implementation to final merge:
apps/server/src/process/agentScope.ts: byte-for-byte identical (13689 bytes)
apps/server/src/process/agentScope.test.ts: byte-for-byte identical (9227 bytes)

BEFORE exact typed invocation:
(echo 'current-main T3 terminal'; cat /proc/self/cgroup; cat /sys/fs/cgroup$(cut -d: -f3 /proc/self/cgroup)/cgroup.controllers; KIND_EXPERIMENTAL_PROVIDER=podman /tmp/21730-kind create cluster --name triage-21730-app --wait 30s) 2>&1 | tee /tmp/21730-app-before.log

BEFORE raw log:
current-main T3 terminal
0::/user.slice/user-1000.slice/user@1000.service/app.slice/app-t3code.slice/app-t3code-agents.slice/t3code-terminal-94156811.scope
memory pids
using podman due to KIND_EXPERIMENTAL_PROVIDER
enabling experimental podman provider
ERROR: failed to create cluster: running kind with rootless provider requires setting systemd property "Delegate=yes", see https://kind.sigs.k8s.io/docs/user/rootless/

AFTER exact typed invocation:
(echo 'fixed T3 terminal'; cat /proc/self/cgroup; cat /sys/fs/cgroup$(cut -d: -f3 /proc/self/cgroup)/cgroup.controllers; systemctl --user show $(basename $(cut -d: -f3 /proc/self/cgroup)) -p Delegate -p DelegateControllers; KIND_EXPERIMENTAL_PROVIDER=podman /tmp/21730-kind create cluster --name triage-21730-app-after --wait 30s) 2>&1 | tee /tmp/21730-app-after.log

AFTER raw log:
fixed T3 terminal
0::/user.slice/user-1000.slice/user@1000.service/app.slice/app-t3code.slice/app-t3code-agents.slice/t3code-terminal-414a3c28.scope
cpu memory pids
Delegate=yes
DelegateControllers=cpu cpuset io memory pids
using podman due to KIND_EXPERIMENTAL_PROVIDER
enabling experimental podman provider
Creating cluster "triage-21730-app-after" ...
 • Ensuring node image (kindest/node:v1.35.0) 🖼  ...
 ✓ Ensuring node image (kindest/node:v1.35.0) 🖼
 • Preparing nodes 📦   ...
 ✗ Preparing nodes 📦 
ERROR: failed to create cluster: command "podman run --name triage-21730-app-after-control-plane --hostname triage-21730-app-after-control-plane --label io.x-k8s.kind.role=control-plane --privileged --tmpfs /tmp --tmpfs /run --volume 5a982d931a004352e14bb61c9570f042f868f112baabbfa94e0df4579331ea2f:/var:suid,exec,dev --volume /lib/modules:/lib/modules:ro -e KIND_EXPERIMENTAL_CONTAINERD_SNAPSHOTTER --detach --tty --net kind --label io.x-k8s.kind.cluster=triage-21730-app-after -e container=podman --cgroupns=private --device /dev/fuse --publish=127.0.0.1:38317:6443/tcp -e KUBECONFIG=/etc/kubernetes/admin.conf docker.io/kindest/node@sha256:452d707d4862f52530247495d180205e029056831160e22870e37e3f6c1ac31f" failed with error: exit status 125

Command Output: Error: statfs /lib/modules: no such file or directory

Regression test invocation (working directory apps/server):
vp test run src/process/agentScope.test.ts

RED at 7e3b309b0353a334f478c5a726a1465709b90d30 (lead-reported result; no separate raw red log supplied):
1 failed, 5 passed. AssertionError: expected launch args to include --property=Delegate=yes, agentScope.test.ts:189.

GREEN at final merged head, existing /tmp/21730-green.log, raw output:
note: You are running `vp test` as a Vite+ built-in command. If you meant to run the test npm script, use `vpr test` instead.

 RUN  v5.0.5 /home/ubuntu/wt/issue-21730/apps/server


 Test Files  1 passed (1)
      Tests  6 passed (6)
   Start at  08:06:06
   Duration  6.34s (transform 70%, import 24%, tests 4%, setup 2%)


Conclusion and limits:
The runtime evidence proves removal of the Delegate=yes blocker: the after scope reports Delegate=yes and kind proceeds to node preparation. Full cluster creation is unverified and failed on this host because /lib/modules is missing. Available scope controllers shown in the log are cpu memory pids; this is not proof of availability of every controller. No fresh test rerun was performed during this evidence-only task.

Visual matrix: 0/0. Server-only change; proof audit found no applicable visual matrix entries. No visible differences; no captures or seeding required.

FRICTION category|happened|prevention
Evidence provenance|Runtime after capture preceded implementation commit|Record uncommitted capture provenance and verify committed scope files against final head.
Host prerequisite|kind node preparation failed because /lib/modules is absent|Use a host with required kernel modules mounted before claiming full cluster success.
Evidence completeness|Prior runtime artifact omitted final revisions and green output|Use this self-contained artifact, which supersedes /tmp/21730-runtime.txt.