# Combined BootService evidence — round 2

PR [#25999](https://git.cafe/pingdotgg/t3code/pull/25999) ([#25999](https://github.com/pingdotgg/t3code/pull/25999)); Before [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484); After [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4).

**28 of 31 matrix rows captured.** Fourteen rows now use complete native Linux release A/B runtimes (D01–D10, D12 real GNU variant, D20–D21, C01); fourteen use explicitly labelled synthetic/fault/coordination harnesses. D12 additionally retains its synthetic partial-copy and runner-error variants. M01–M03 remain cannot-verify macos. No rendered UI exists.

## Environment

Round 2: fs-14, Ubuntu Linux x86_64, kernel 6.1.102, **Node v24.22.1**, GNU cp 9.4, ext4; real loginctl reports lingering yes. Retained round-1 harness captures report **Node v26.12.1** on the same Linux/kernel/cp/filesystem. [Round-2 environment](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/138956c0e080e1ec/environment.txt).

## Fixture provenance and capture contract

Release A = `0.1.1-preview.20261018.3327` (2,808 files / 302,662,798 bytes including the scratch sentinel); B = `0.1.3-preview.20261026.3702` (2,891 files / 312,030,495 bytes). Both complete native Linux runtime directories were copied with `cp -a` from only the two authorized live runtime directories. Each run receives independent scratch copies using `cp -a --reflink=auto`. No binary is uploaded. [Provenance discrepancy](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d2756cf8a62d688f/fixture-provenance.json).

**A sentinel caveat:** live A had no `.install-complete`. Its scratch copy receives a reconstructed sentinel containing the version returned by the actual A binary; no file under the live install was changed. B’s existing sentinel is copied unchanged. This is complete release runtime content with explicitly reconstructed A install metadata, not proof that live A had a valid sentinel.

Neither release fixture contains symlinks. Source and copied complete manifests compare equal, including all asset hashes, modes, types and targets. Top-level entries, t3 and sentinels are printed in checkpoints; full sorted manifests are in the archive. The normalizer verifies the manifest hash and expands source/copied t3 plus client/index.html hashes into every release checkpoint. [A original scratch manifest](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c173417202630e2d/fixture-0.1.1-preview.20261018.3327.manifest.json); [B original scratch manifest](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/212c727a42bd337b/fixture-0.1.3-preview.20261026.3702.manifest.json).

One adapted round-2 driver runs exact git-archive source snapshots for both revisions, sharing installed unchanged dependencies. Both 1,374-file source snapshots match their exact git blob IDs. It imports the actual BootService and actual onboarding caller. Real NodeFileSystem and ProcessRunner execute all ordinary copies and `t3 --version`; only service-manager boundaries are intercepted. Linux ELF runtimes deliberately select the Darwin manager through HostProcess; no real launchctl, TCC, signed Mach-O or APFS behavior is claimed. [Round-1 driver download identity verification](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0ecddaf068e86918/original-download-verification.json).

D02 reads the actual Before-generated legacy plist/state in the After run. D04 executes onboarding healthy skip and damaged repair, with synthetic Enter/default-yes only when prompted. The deprecated alias and full interactive uninstall CLI are source-traced, not executed. C04 seeds completed-update state and is not an actual remote-update capture.

C01 uses the two available real releases: first A, update to B, then stage B→A with explicit allowDowngrade:true, restart A and uninstall. The retained C02 transcript also contains obsolete synthetic C01 checkpoints; those are superseded by round 2. Likewise round-1 K3’s ordinary synthetic D12 is superseded; only its explicitly labelled partial/runner-error variants are retained.

## Per-bundle captures

All linked transcript checkpoints preserve revision SHA, fixture provenance, command argv/results, unit/plist and parsed ProgramArguments/ExecStart, tree summary/full-manifest hash, executable and asset hashes, sentinels, state, restart marker, status and ordered operations. Before/After diff inputs remove provenance fields and manifest filenames only, normalize root/temp/Fiber/stack metadata, and retain observable content and hashes. Raw logs remain lossless.

### K1 — lifecycle

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D01 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff) | native Linux release A/B; D04 synthetic Enter only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D02 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff) | native Linux release A/B; D04 synthetic Enter only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D03 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff) | native Linux release A/B; D04 synthetic Enter only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D04 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff) | native Linux release A/B; D04 synthetic Enter only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D05 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff) | native Linux release A/B; D04 synthetic Enter only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K2 — status predicates

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D07 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98e58370fd3a3375/K2-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/15b90c6be7d16406/K2-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27a15a6b3497099d/K2.diff) | native Linux release A/B; D08 read-error subcase narrowly intercepted | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D08 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98e58370fd3a3375/K2-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/15b90c6be7d16406/K2-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27a15a6b3497099d/K2.diff) | native Linux release A/B; D08 read-error subcase narrowly intercepted | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D09 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98e58370fd3a3375/K2-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/15b90c6be7d16406/K2-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27a15a6b3497099d/K2.diff) | native Linux release A/B; D08 read-error subcase narrowly intercepted | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D10 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98e58370fd3a3375/K2-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/15b90c6be7d16406/K2-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27a15a6b3497099d/K2.diff) | native Linux release A/B; D08 read-error subcase narrowly intercepted | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K3 — copy branches

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D11 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/23a412592a3d2bdc/K3-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/86c3c6bec3e5cc48/K3.diff) | synthetic/harness clone success, complete fs.copy; not APFS | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D12 real GNU rejection | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1507933210bbbd93/K3R-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc7c833601f51ff7/K3R-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e166269d23dfead4/K3R.diff) | native Linux release A/B; real cp and version validation | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D12 partial / runner error | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/23a412592a3d2bdc/K3-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/86c3c6bec3e5cc48/K3.diff) | synthetic/harness; retained injected variants only | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D13 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/23a412592a3d2bdc/K3-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/86c3c6bec3e5cc48/K3.diff) | synthetic/harness fallback-copy failure | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K4 — publish failures

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D14 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dd295533b81f7bf/K4-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ecf84b49be09d04/K4.diff) | synthetic/harness typed rename failure | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D15 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dd295533b81f7bf/K4-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ecf84b49be09d04/K4.diff) | synthetic/harness typed rename failure | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D16 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dd295533b81f7bf/K4-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ecf84b49be09d04/K4.diff) | synthetic/harness typed rename failure | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K5 — coordination

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D17 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5cdfc04105b6ffcf/K5-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1f3b97f747fa7731/K5.diff) | synthetic/harness Deferred barriers and Fiber exits | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D18 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5cdfc04105b6ffcf/K5-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1f3b97f747fa7731/K5.diff) | synthetic/harness Deferred barriers and Fiber exits | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K6 — activation retry

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D19 | [Round 1 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1103da73e9dc7782/K6-before.transcript.txt) | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72c9171635a191bc/K6-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/73f63c361b0a780a/K6.diff) | synthetic/harness launchctl failure then retry | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K7 — cleanup boundary

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D20 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a3b56d62915babd/K7-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/41b5e4e53fe2918e/K7-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/537af8d0789f7f69/K7.diff) | native Linux release A/B; synthetic named orphan/sibling markers | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D21 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a3b56d62915babd/K7-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/41b5e4e53fe2918e/K7-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/537af8d0789f7f69/K7.diff) | native Linux release A/B; synthetic named orphan/sibling markers | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### K8 — Linux controls

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| C01 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/13436e2eecdff193/K8-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cacf16c3df1b4bcd/K8-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f628a54d1d2e3b7d/K8.diff) | native Linux release A/B; real loginctl; fake systemctl | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| C02 | [Round 1 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d39418ae90cddba4/K8-before.transcript.txt) | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0ef687b23813de43/K8-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00157b69730ac008/K8.diff) | synthetic/harness forced inside-service config; fake systemd-run | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### O1 — first staged install

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D06 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05a872526cb22f81/O1-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/796dd3333f5fe490/O1-after.transcript.txt) | [Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56ea8dc41d92889d/O1.diff) | native Linux release A/B | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### O2 — cleanup/double-fault limits

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| D22 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6a787790c77bca56/O2-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14bba523759cfd99/O2.diff) | synthetic/harness isolated filesystem faults | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| D23 | No corresponding Before branch | [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6a787790c77bca56/O2-after.transcript.txt) | [Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14bba523759cfd99/O2.diff) | synthetic/harness isolated filesystem faults | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



### O3 — selectors, remote-state characterization and guards

| Row | Before | After | Diff | Fixture provenance | Source SHAs |
| --- | --- | --- | --- | --- | --- |
| C03 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/39ac488206d2d161/O3-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/090a95c734429a78/O3-after.transcript.txt) | [Normalized diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0094cd35510c4e71/O3.diff) | synthetic/harness; C05 stable relative dbPath; no database | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| C04 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/39ac488206d2d161/O3-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/090a95c734429a78/O3-after.transcript.txt) | [Normalized diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0094cd35510c4e71/O3.diff) | synthetic/harness; C05 stable relative dbPath; no database | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |
| C05 | [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/39ac488206d2d161/O3-before.transcript.txt) | [Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/090a95c734429a78/O3-after.transcript.txt) | [Normalized diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0094cd35510c4e71/O3.diff) | synthetic/harness; C05 stable relative dbPath; no database | [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484) → [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4) |



## What else changed

# Every difference: round-2 release captures plus retained harnesses

Unified diffs preserve every changed line. checkpoint-differences.json enumerates every changed round-2 checkpoint field with full Before/After values; the original round-1 classification remains authoritative for retained harness-only operations. This list classifies the differences, including instrumentation and observed limits.

- **Darwin executable path and unit bytes (K1/K2/K3R/K7/O1/O3):** Before selects runtime/versions/<release>/t3; After selects runtime/launcher/t3. `__service-launcher`, escaped custom T3 home (spaces, ampersand, angle brackets), logs, environment and other manager configuration retain their meaning. D03 changes A→B program paths Before and keeps the identical program path After. The full old open-file-descriptor SHA256 still equals complete release A on both revisions after updating.
- **Real copy commands and filesystem operations:** Head Darwin installs add `cp -c -pR source unique-stage/launcher`, timeout 600000 ms. GNU cp 9.4 really exits 1 with invalid-option `-c`; destination removal precedes real NodeFileSystem.copy. Complete assets, file counts, bytes, SHA256 hashes, modes, types and sentinels match each source manifest. Replacement adds old→previous rename, next→launcher promotion and staging deletion. Before does none of this publishing. The extra tree, total bytes, manifest hash, source/copied asset entries and operation logs all reflect those actual files and operations.
- **Symlinks:** Neither native Linux release fixture contains any symlink, and neither copied launcher acquires any. This differs from the retained synthetic harness fixture, whose relative manifest-link becomes an absolute symlink back to the versioned source asset through NodeFileSystem.copy. The synthetic successful-clone simulation uses the same primitive. These observations do not prove native macOS cp/APFS behavior.
- **D02 migration asymmetry:** Before generates the genuine legacy A plist/state; After first reads exactly that preserved directory (no re-rendered driver plist), then installs B at the fixed launcher. After necessarily has an extra final checkpoint, B tree, manager/copy/swap operations and successful B status. The initial head view of the old unit is not current; the migrated final view is current.
- **D04 reconciliation:** Both skip healthy A without prompting or publishing. Base ignores absent/stale extraneous launcher damage; head status becomes false, executes the actual onboarding prompt and repairs on synthetic Enter/default-yes. Captured terminal output and prompt counts therefore differ. Separately labelled direct layer reinstall always runs; head republishes A while base leaves the extraneous stale launcher unchanged. Equivalent base-only launcher seeds use the real filesystem copy. The `.saved` sibling remains on both sides and is not treated as a managed launcher.
- **D07–D10 predicates:** Missing launcher t3, absent/unreadable sentinel and other/malformed version text make head current false, while base ignores that extraneous directory. D08's narrowly redirected sentinel-read failure is reached only by head, so the corresponding injected-read event is head-only. Whitespace around exact A remains accepted. Source t3/sentinel absence or mismatch keeps both false despite a healthy copied launcher. installedVersion remains A. D09 direct reinstall repairs only the managed head sentinel. Tree/sentinel hashes reflect the deliberately damaged fixture state.
- **Stage/restart (D05/D06):** Both publish target state plus restart marker, preserve service.env byte-for-byte, avoid stop/bootstrap during start:false, and become current after restart clears the marker. Head additionally stages/swaps the copied launcher; base keeps the versioned program path. D06 was recaptured with complete releases as an optional ordinary row.
- **D20 uninstall:** Both deactivate before deleting the unit, return true, then return false on a second call. Head additionally deletes exact launcher and every launcher.next-* leftover; base retains them. Both retain version directories and launcher-other/launcher.nextish/launcher.next siblings. Tree/file-count/byte/manifest/status differences follow that cleanup. D21 with no unit is observably equal: false and orphan launcher/staging retained.
- **C01 Linux control:** No observable Before/After difference after declared path/provenance/manifest-filename normalization. ExecStart remains versioned, no cp publishes a launcher, the sibling launcher sentinel is ignored/retained, and install/update/stage/restart/status/uninstall behavior matches. To use only the two available real releases, staging is B→A with explicit allowDowngrade:true; both sides use the identical options. This is a capture recipe detail rather than a product behavior change. Retained C02 separately proves the synthetic inside-service systemd-run handoff before state/unit mutation; its older C01 checkpoints are superseded.
- **C03–C05 recapture:** Selector results are equal. C04 is only state-seeded remote-update characterization: both are false until repair, which adds the fixed tree/path only on head. C05 pending/downgrade/concurrent-state guards run before any publish; old launcher hash remains intact, and operation/error/state/marker outputs match apart from the existing Darwin path/tree. PATH-only normalization remains current; mismatched unit/invalid state are false. **The seeded dbPath is now the identical relative synthetic-not-created.sqlite on both sides; service-state.json hashes and byte counts match at every paired C05 checkpoint. No state hash delta is dismissed as normalization noise.**
- **Retained D11–D19, D22–D23 harness behavior:** Successful cp simulation performs a full copy and skips fallback; partial/nonzero/runner-error branches discard partial files. Copy/rename failures print raw causes, target state and marker; D13/D15/D16 retain or restore old A. Deferred copy interruption preserves A; interrupted swap completes before Fiber exit; controlled overlap yields one complete final C with restart pending. Bootstrap failure leaves complete files, retry clears pending. Cleanup-failure cases explicitly retain leftovers when errors are ignored; double promotion/rollback failure can lose the prior launcher through final staging cleanup. These are original accepted synthetic/fault captures, not new release or macOS proofs.
- **Capture metadata:** Round 2 uses the exact git-archive source snapshots, Node v24.22.1 and real release versions; retained round 1 used Node v26.12.1 and synthetic 0.1.3/0.1.4/0.1.5 fixtures. Every round-2 primary checkpoint retains its revision and fixture provenance. Diffs omit sourceRevision/side/driverSHA256 and manifest filenames, normalize run/legacy/source roots, random stage/durable-temp identities, Fiber IDs and stack positions. Full manifest contents/hashes, command exits, errors and raw logs remain preserved. Full manifest equality is additionally asserted for copied release trees; normalized checkpoints expand executable/asset hashes from SHA256-verified driver manifests. Manifest filenames may differ by checkpoint ordinal, so only their filenames are omitted from diff inputs.
- **A install metadata exception:** The authorized live release A directory lacks its sentinel; only the scratch copy gets a sentinel reconstructed from the real `t3 --version`. B metadata is copied unchanged. All native runtime bytes/assets are original. No file in the live install, live database, lead worktree or another machine was changed.

No actual launchctl/TCC/signed Mach-O/APFS behavior is verified, no interactive full uninstall is executed, and no remote-update subprocess is run. M01–M03 remain cannot-verify macos. No product implementation difference beyond those recorded above is asserted.


Every changed checkpoint field, including full Before/After values: [round-2 field deltas](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/96bbb3c282ec4931/checkpoint-differences.json). Unified diffs retain non-checkpoint command/operation changes. The retained round-1 difference classification is linked for the harness rows: [round-1 harness differences](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0012c90ca16b88f4/what-else-changed.md).

## Validation

[Round-2 capture audit](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ba8b078b5c19aa62/capture-audit.txt); [audit JSON](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/727244eeefb326e9/capture-audit.json); [command, manifest, C05 hash and Linux control validation](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56ed54c6c550d701/independent-validation.json). No product source was edited and no test run replaces these real-code captures. Prior focused test results remain in the original index and were not rerun for this evidence-only round.

## Unverified rows

| Row | Status / reason |
| --- | --- |
| M01 | cannot-verify macos: Linux VM; no actual launchctl loaded job, signed native runtime lifecycle or PID integration. |
| M02 | cannot-verify macos: no TCC grants, same-designated-requirement signatures, protected-folder access or running signed Mach-O survival. |
| M03 | cannot-verify macos: no APFS clone/extents or native macOS cp proof. Linux GNU fallback and labelled simulation only. |



No other matrix row is missing; the A-sentinel provenance exception and caller/OS subclaim limits above remain explicit.

## Scripts and raw evidence

[capture-driver.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c598dd41bf15b269/capture-driver.ts); [run-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cecf3d622fa40f66/run-captures.py); [normalize.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/65442eed12036147/normalize.py); [audit-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6cf3cd68245ac834/audit-captures.py); [validate-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2974ad15eb909b2b/validate-captures.py); [setup-capture.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62510aea325c437a/setup-capture.py); [replay.sh](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1e2fead3d985477f/replay.sh); [build-index.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14310eebdf696cef/build-index.py).

All round-2 raw logs, normalized transcripts, full manifests, diffs and driver changes (no binaries, databases or source dependency directories): [round-2 archive](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/743a1cf1ec7fccab/raw-logs-and-drivers.tar.gz). Retained harness artifacts and original driver versions remain available through the [round-1 index](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/84b2b56e8577830f/evidence-index.md).

Original matrix: [fixture-matrix.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2a4944b944e53d4f/fixture-matrix.md). Cleanup: [cleanup.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27ebc9707e7db154/cleanup.txt). All subprocesses exited, no base worktree was created, head remains clean at the requested SHA, release scratch copies removed, no live database read or copied, no remote machine contacted.

## Ready-to-paste PR Evidence section

```md

## Evidence
Before [36d4d71](https://git.cafe/pingdotgg/t3code/commit/36d4d711b79c73eb33131944f73ea4a8c6156484); After [7a90b56](https://git.cafe/pingdotgg/t3code/commit/7a90b56c54a924d63d91c40e3eecd96d048c1da4). Server-only runtime captures; no rendered UI.
**28/31 matrix rows captured:** 14 use complete native Linux release A/B runtimes; 14 use labelled synthetic/fault/coordination harnesses. M01–M03 remain cannot-verify macos.
Release A: `0.1.1-preview.20261018.3327`; B: `0.1.3-preview.20261026.3702`. **A’s live sentinel was absent; only its scratch sentinel was reconstructed from the real binary version.** B’s sentinel is unchanged.
Round 2: Linux fs-14, kernel 6.1.102, Node v24.22.1, GNU cp 9.4, ext4. Retained round-1 harnesses: Node v26.12.1. Service managers intercepted; ordinary version validation/cp/filesystem operations real.
- K1 (D01, D02, D03, D04, D05): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3326f6bd54c937dd/K1-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bed8b4692c0717a5/K1-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e984734437c14d86/K1.diff).
- K2 (D07, D08, D09, D10): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98e58370fd3a3375/K2-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/15b90c6be7d16406/K2-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/27a15a6b3497099d/K2.diff).
- K3 (D11, D12 real GNU rejection, D12 partial / runner error, D13): [Round 1 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a47c1ac6502c760/K3-before.transcript.txt)/[Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/23a412592a3d2bdc/K3-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/86c3c6bec3e5cc48/K3.diff); [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1507933210bbbd93/K3R-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc7c833601f51ff7/K3R-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e166269d23dfead4/K3R.diff).
- K4 (D14, D15, D16): [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dd295533b81f7bf/K4-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ecf84b49be09d04/K4.diff).
- K5 (D17, D18): [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5cdfc04105b6ffcf/K5-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1f3b97f747fa7731/K5.diff).
- K6 (D19): [Round 1 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1103da73e9dc7782/K6-before.transcript.txt)/[Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72c9171635a191bc/K6-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/73f63c361b0a780a/K6.diff).
- K7 (D20, D21): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a3b56d62915babd/K7-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/41b5e4e53fe2918e/K7-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/537af8d0789f7f69/K7.diff).
- K8 (C01, C02): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/13436e2eecdff193/K8-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cacf16c3df1b4bcd/K8-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f628a54d1d2e3b7d/K8.diff); [Round 1 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d39418ae90cddba4/K8-before.transcript.txt)/[Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0ef687b23813de43/K8-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00157b69730ac008/K8.diff).
- O1 (D06): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/05a872526cb22f81/O1-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/796dd3333f5fe490/O1-after.transcript.txt)/[Release diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56ea8dc41d92889d/O1.diff).
- O2 (D22, D23): [Round 1 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6a787790c77bca56/O2-after.transcript.txt)/[Harness diff / branch note](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14bba523759cfd99/O2.diff).
- O3 (C03, C04, C05): [Round 2 Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/39ac488206d2d161/O3-before.transcript.txt)/[Round 2 After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/090a95c734429a78/O3-after.transcript.txt)/[Normalized diff](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0094cd35510c4e71/O3.diff).
D02 reuses base-generated legacy state/plist; D04 executes onboarding skip/repair. C01 stages B→A with explicit downgrade permission. C04 is state-seeded characterization, not actual remote-update execution.
Release trees have no symlinks; complete source/copied manifests match. Retained synthetic symlinks become absolute links to versioned source assets through NodeFileSystem.copy.
Observed limits: no-unit uninstall retains orphans; ignored cleanup faults leave leftovers; double promotion/rollback failure can lose the previous launcher. C05 now has stable relative dbPath hashes; Linux C01 diff is empty.
**M01–M03 cannot-verify macos:** actual launchctl, TCC/grant persistence, signed Mach-O survival and APFS cloning require macOS.
Drivers: [capture-driver.ts](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c598dd41bf15b269/capture-driver.ts), [run-captures.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cecf3d622fa40f66/run-captures.py), [normalize.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/65442eed12036147/normalize.py); raw logs/manifests: [raw-logs-and-drivers.tar.gz](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/743a1cf1ec7fccab/raw-logs-and-drivers.tar.gz); [every difference](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0877ceca5b49eb3d/what-else-changed.md).
Captured by gpt-6.1-sol through the Codex harness. Evidence only; no code edits, commits, pushes or PR-body changes.

```