# Evidence, round 4

**Evidence, round 4 — [#31723](https://git.cafe/pingdotgg/t3code/pull/31723).** Head [7b767c025b](https://git.cafe/pingdotgg/t3code/commit/7b767c025b48b637faf94b4c3ddd8e191869b5d2); capture SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89); before [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5).

Per-row status below replaces the prior completion count. “Full” refers to the requested web evidence variants tracked in these rounds; it does not certify every interaction in the original 49-row matrix. Round4 closes R23 with an explicitly labelled transport harness and R35 with two check-capable environments at the capture revision. R22 stays **accepted app-limited attempt**. All round3 media and earlier retained evidence remain available below; four settled after-only stills and two recordings are new.

**Environment:** Web; Linux x86_64; Preview Chrome 156, CSS 1440×1000 / 390×844, DPR 2, zoom 1, fonts loaded, 16 px root, 100% font scale, page Date 2026-11-06T02:00:00.000Z; light/dark as labelled. Exported Preview PNG 1280×889 wide / 780×1688 narrow; Preview video 2880×2000. Reduced-motion supplement: Playwright 1.60.0 / Chromium 148.0.7778.96, same CSS 1440×1000 and DPR 2; PNG 2880×2000, video 1440×1000. Stub op CLI, no live 1Password.

**Retained round-2 assets:** 26 settled stills (including one disconnect diagnostic), 2 explicitly live animated supplements, 8 before/after pairs and 16 diffs, 10 recordings (including one disconnect diagnostic). All 26 settled stills have AE=0 between screenshots 500 ms apart, after font and resource quiet. The normal-motion R09 and R36 supplements intentionally contain a spinner and are not described as settled: their pair AE values are 3822 and 74 respectively. R09's supplemental pair also spans tooltip appearance; its selected second frame shows the full tooltip. Their reduced-motion equivalents are independently AE=0 and the clean reduced-motion recording shows the full pending tooltip and busy parent. Every selected still/diff and recording review sheet was opened before upload. Whole-view screenshots are unedited; review sheets may crop/scale for inspection. The two retained exports trimmed leading material (R09:4.379s; reduced motion:6.4s), but the reduced-motion export still opens with app loading and layout settling. Its chapters below now identify those frames honestly. R09 retains the disclosed container/timeline discrepancy.

**Retained round-2 synthetic fixture:** both checkouts started fresh with T3CODE_DEV_SEED=0 and the same round 1 seed, paired fixture and round 2 extension drivers. The real app/RPC/service paths were used. Generic reference and token fields use op://Dev/Key/x; the tighter Cursor key and Server password use op://a/b/c. Neither resolves in the stub. Good success in retained C2 uses op://Dev/Good/credential, the stub's only synthetic success. Dev vault is renamed to Engineering shared vault (production credentials) for R11; R14/R15 carry that same local fixture context. Provider instances stay disabled and have no configured models. No provider agent, device session or lease was launched. EAS and Simlock gates were enabled through supported settings; their real account/identity lookup shows the synthetic missing-secret result, not a live account response.

## Current per-row status

| Row | Status | Exact proof / missing evidence |
| --- | --- | --- |
| R08 | **full** | Tab focus ring and readable idle tooltip; retained recording. |
| R09 | **full** | Pending visual/tooltip proof: retained live PNG and reduced-motion recording. MP4 timing inconsistency disclosed below. |
| R11 | **full** | 64-character maximum label, entire wrapped failure tooltip at 390 light and dark. |
| R14 | **full** | Selected source and blank reference; check absent. |
| R15 | **full** | Rejected draft at 390 light; wrapped error and no check. |
| R22 | **accepted app-limited attempt** | Retained pre-click disconnect removes editor; no command-failure result or recovery is claimed. |
| R23 | **full (labelled harness)** | Connected real app keeps secretSourceCheck advertised; browser transport injection produces an RPC Failure and the real warning/“Could not reach the server” tooltip. See round4 still, recording and injection script. |
| R26 | **full** | Dedicated Cursor key with Clear: before/after and both diffs. |
| R27 | **full** | Narrow Server password with Clear: before/after and both diffs; context row also changes. |
| R31 | **full** | GitHub token form at 1440 and390 light: before/after and both diffs. |
| R32 | **full** | Add hub committed-reference still pair/diffs; retained recording shows source-selection setup only. |
| R33 | **full** | EAS editor token/clear/status context: retained pair/diffs; synthetic account failure. |
| R34 | **full** | Single-environment Simlock token/clear/status context: retained pair/diffs; synthetic identity failure. |
| R35 | **full** | Both paired environments run the capture revision and advertise secretSourceCheck. Real per-origin checks produce Alpha resolved / Beta failed in one client; supplemental failed Alpha draft supplies its provider-labelled tooltip. |
| R36 | **full** | Busy EAS parent, disabled token/check, saving footer; retained stills/recordings. |
| R37 | **full** | Busy source-control fieldset/check and saving footer; retained still/recording. |
| R38 | **full** | Retained read-only card plus real administrator-pinned variable row with reason. Policy row replaces input/check rather than showing a disabled check. |
| R41 | **full** | Validator maximum1024 accepted at 1440/390 light;1025 rejected at 390light with check hidden. Native input clips long text. |
| R42 | **full** | Reduced pending/completed/busy proof retained; opening chapter corrected from decoded frames. |

## Round 4 additions — two rows only

Both temporary checkouts ran capture revision [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89), each installed with `vp install`, each started fresh with `T3CODE_DEV_SEED=0` and its own stub `op` executable. No live database was read or seeded. Synthetic settings were created through the real app RPC using the uploaded drivers. The tracked source was clean in both worktrees before removal. No app code was changed. The requested later head is identified above; the render paths under test are unchanged per the capture brief.

**Round4 environment:** web, Preview Chrome156 on Linux x86_64, CSS1440×1000, DPR2, zoom1, 16px root, fonts loaded, light theme, page Date2026-11-06T02:00:00.000Z. Preview exports whole-view PNG1280×889 and native MP4 2880×2000. Four selected stills each have a second pixel-identical screenshot at least500ms apart (AE0). Every member of those pairs was opened; both final recordings were decoded completely, all review sheets opened, and chapter frames inspected. No before/diff is requested for these two after-only rows. Still exports and recordings are unedited.

| Row / viewport·theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| R23 **full (labelled harness)** ·1440×1000·light | — | ![After: connected check warning and Could not reach the server tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72334a75c44a6eab/R23-transport-failure-after-1440-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d08e963f45b50e9c/R23-transport-fault-delivered.mp4) | — | — |
| R35 **full** ·1440×1000·light | — | ![After: Alpha resolved, Beta failed; tooltip names Beta vault](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c42ddc397e81ff31/R35-beta-failed-after-1440-light.png)<br>![After: independent rows; Alpha success tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7cf92aa2485849ec/R35-alpha-resolved-after-1440-light.png)<br>![After supplemental draft: failed Alpha tooltip names Alpha vault; Beta result unchanged](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/be53d8643f1083fd/R35-alpha-failed-after-1440-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2d69bf29dc77dc86/R35-independent-environments-delivered.mp4) | — | — |

**R23 label:** harness: transport fault injected in the browser; app code unmodified

The injection intercepts the outgoing `server.checkSecretSource` WebSocket Request, changes only its tag to `harness.secretSourceTransportFault`, and retains the real socket, request id and payload. The connected server returns the correlated `Exit/Failure/Die` for the unknown tag. The app's real command error path renders the warning and exact tooltip **“Could not reach the server”**; no component state or tooltip is fabricated. The delivered recording request is id50. A real `server.getConfig` read after failure confirms `secretSourceCheck:true` and the editor stays open. This is a harness capture of command failure, not a natural disconnect or a typed provider-resolution failure.

**R35 destination proof:** one authenticated primary client contains two genuinely paired capture-revision environments. Row `fs-26 · localhost:8622` targets environment `41d73010-2e29-4de9-853c-cc6a6dbad57f`, provider `vault-a` labelled **Alpha vault**, reference `op://Dev/Good/credential`. Row `fs-26 · localhost:7753` targets environment `22e4d2fe-0bd6-4e3d-a7cb-1814483caec7`, provider `vault-b` labelled **Beta vault**, reference `op://Dev/Missing/credential`. Both real config responses advertise `secretSourceCheck:true`. The observational browser logger changes no request: id53 goes to `ws://localhost:8622` and returns `Resolved`; id54 goes to `ws://localhost:7753` and returns `Failed`, with a detail naming Beta vault. The final primary still and recording show green Alpha alongside failed Beta.

The app's success tooltip is exactly **“Secret resolved”** and does not include the provider label. To show Alpha's own provider-labelled tooltip without changing app code, a supplemental after-only still checks a temporary first-row draft `op://Dev/Missing/alpha`. Its real failure names **Alpha vault** while Beta's existing failure remains unchanged. That draft was cancelled, not saved. The primary resolved/failed pair is separately preserved. The red identity text beneath these token controls comes from independent automatic Simlock identity probes: Alpha resolves but cannot reach the deliberately unavailable synthetic gateway at loopback port1; Beta cannot resolve its missing secret. No lease, device session or provider agent was started.

### Round4 recording chapters from decoded frames

These times are exact `ffprobe best_effort_timestamp_time` in the delivered files. They describe visible frames, not inferred dispatch times. Native recording intermittently retains the pre-result icon while the asynchronous operation completes; chapters below only claim states actually visible in the decoded frames.

[R35-independent-environments-delivered.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2d69bf29dc77dc86/R35-independent-environments-delivered.mp4) — 52 decoded frames, 21.886567s container duration, final frame PTS21.853267s.

- 0.000000s · frame1: Both connected token rows; checks idle.
- 6.184800s · frame24: Alpha check green; Beta check still idle.
- 10.189700s · frame28: Alpha success tooltip fully readable: Secret resolved.
- 14.992733s · frame48: Beta check failed; Alpha remains green.
- 19.072567s · frame51: Beta failure tooltip fully readable, naming Beta vault.
- 21.853267s · frame52: Same independent results and readable tooltip held.

[R23-transport-fault-delivered.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d08e963f45b50e9c/R23-transport-fault-delivered.mp4) — 26 decoded frames, 11.659467s container duration, final frame PTS11.626167s.

- 0.000000s · frame1: Connected Simlock editor; check idle.
- 4.741367s · frame22: RPC failure warning icon visible.
- 8.883633s · frame25: Could not reach the server tooltip fully readable.
- 11.626167s · frame26: Warning and full tooltip held.

**Round4 artifacts:** [transport-fault.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a08f8be1b06c1c9f/transport-fault.js) · [scripts.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d5710e2c75c47e08/scripts.zip) · [settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14460e884f00fc41/settled-frame-pairs.zip) · [recording-frame-review.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c6f44e7258bec54a/recording-frame-review.zip) · [encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/37584f7b47b4426b/encoded-chapters.json) · [verification.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/06c356eb836cd6bb/verification.zip) · [asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5fae5409c021e7a/asset-manifest.json)

The scripts archive includes both synthetic op executables, seed/RPC drivers, the observation script, browser transport injection, display setup, server launcher, decoding tool and capture sequence. The verification archive includes environment/capability/SHA proof, destination RPC results, transport Failure proof, synthetic stub invocation logs, AE0 pair results, cleanup and friction. Private startup/pairing logs are excluded. All selected media, scripts and supporting artifacts have public URLs; their SHA256 and sizes appear in the manifest.

**Round4 cleanup:** both owned Preview tabs closed, both captured server process groups272634/272635 stopped, ports8622/16662/7753/15793 have no listeners, and both literal cap4 worktrees were removed. Available disk after cleanup:8GB. Evidence remains at `/tmp/lead-31723-r1/capture-4/`. No repository edits, PR comments, pushes or CI runs were made.

AI-assisted; verified with the tests and tools listed above.

## Retained round 3 additions (historical)

The round3 R35 attempt below remains as historical evidence; its missing second-capable-server proof is superseded by round4 above.

Nine new settled full-view stills, all AE0 between screenshots500ms apart; one new before/after pair and two binary red/white diffs. Every selected still/diff and all chapter frames were opened before upload. New screenshots retain the prior Preview Chrome 156 / Linux x86_64 rendering environment: CSS 390×844 or 1440×1000, DPR2, zoom 1,16px root, fonts loaded and frozen page Date 2026-11-06T02:00:00.000Z. Export sizes are780×1688 narrow and1280×889 wide. All after captures are explicitly at the requested capture revision above; the requested merge head is labelled separately. The target secret-input render/schema files are unchanged between them; the merge also includes unrelated sidebar/menu changes.

| Row / viewport·theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| R11 maximum64 ·390×844·light/dark | — | ![After light: full maximum-label failure tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/db9f34ed31380f07/R11-max64-after-390-light.png) ![After dark: full maximum-label failure tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ea029ee03d51da80/R11-max64-after-390-dark.png) | — | — |
| R31 ·390×844·light | ![Before: stacked source-control host/token form](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1e1e64bcc18257fc/R31-before-390-light.png) | ![After: stacked source-control host/token form with check](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d409f9ff9363103b/R31-after-390-light.png) | ![Diff0: binary red/white, 0% fuzz](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/99ff34eb3f044b5b/R31-390-light-Diff0.png)<br>AE3517 | ![DiffT: binary red/white, 2% fuzz](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/33369511ba17ab7c/R31-390-light-DiffT.png)<br>AE708 |
| R41 maximum1024 ·1440×1000 /390×844·light | — | ![After wide: accepted1024-character reference](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/428dbddd0d5ee3d7/R41-max1024-after-1440-light.png) ![After narrow: accepted1024-character reference](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98d1a37191117289/R41-max1024-after-390-light.png) | — | — |
| R41 overlength1025 ·390×844·light | — | ![After:1025-character draft rejected, check hidden](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56f904b64178d798/R41-over1025-after-390-light.png) | — | — |
| R35 partial ·1440×1000·light | — | ![After client: two real paired environment token rows; secondary before server has no check](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbcdbeb022bd2786/R35-two-environments-after-1440-light.png) | — | — |
| R38 managed policy ·1440×1000·light | — | ![After: administrator-pinned PROOF_TOKEN row with its management reason](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/946e3b6e53fa5ce9/R38-managed-policy-after-1440-light.png) | — | — |


**Boundary proof:** `SecretProviderLabel` in [settings.ts](https://git.cafe/pingdotgg/t3code/blob/cf10da0e4acbc903b779f064791e16906203bf89/packages/contracts/src/settings.ts#L906) permits 64 characters. The exact new label is `Engineering shared vault (production credentials, platform team)` (64). The server accepts it and rejects 65. The [1Password definition](https://git.cafe/pingdotgg/t3code/blob/cf10da0e4acbc903b779f064791e16906203bf89/packages/secret-provider-onepassword/src/shared/definition.ts#L32) accepts references up to 1024. Fixture `op://Dev/Boundary/` plus 1006 `x` characters is accepted and retains a check in wide/narrow screenshots. Adding one `x` creates the 1025-character rejected draft with no check. DOM length and RPC acceptance are recorded in [boundary-and-policy-proof.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/236dd3034ab0fa59/boundary-and-policy-proof.json); the full string naturally cannot fit a single-line input.

**Managed policy:** [ManagedPolicy.ts](https://git.cafe/pingdotgg/t3code/blob/cf10da0e4acbc903b779f064791e16906203bf89/apps/server/src/policy/ManagedPolicy.ts#L175) supports `T3CODE_DEV_MANAGED_POLICY_PATH` in source development builds. The uploaded policy pins `PROOF_TOKEN` on the OpenCode driver. The real `server.getConfig` summary reports `environment.PROOF_TOKEN` and the driver's bypass field `config.serverUrl` locked. The UI renders the variable name and reason instead of the editable input/check. This supplements the retained read-only/disabled-check evidence; it is not mislabelled as another disabled-check capture.

**What else changed:** the R31 button shortens the token input, with no other changed pixels outside its control. Max-length references retain native single-line clipping. The R35 client really connects to two isolated servers with the same synthetic seed; its automatically disambiguated labels include their web ports. The before server supplies the older capability state. The policy restart reintroduces development-default provider rows and pins the driver's bypass field; these are after-only fixture context, not a before/after layout comparison. No project code, PR state or live database was changed.

**Round3 artifacts:** [scripts.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/90d7485608ad08c6/scripts.zip) · [settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc40ee9bc77c92d7/settled-frame-pairs.zip) · [recording-frame-review.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1b96d84eaf6eeccb/recording-frame-review.zip) · [encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6391955b7fcabbce/encoded-chapters.json) · [R09-timing.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d39ad7213cabccea/R09-timing.json) · [selected-captures.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fde39e2039b9574a/selected-captures.json) · [diff-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5b880040cb9c439e/diff-manifest.json) · [boundary-and-policy-proof.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/236dd3034ab0fa59/boundary-and-policy-proof.json) · [asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5c2470ec03786bf/asset-manifest.json) · [cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/213e149eda871d30/cleanup.json) · [friction.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5cfd319dc51e1d0/friction.txt)

**Cleanup:** all captured server groups stopped; ports 6109/14149/6960/15000 closed; both owned Preview tabs closed; both literal cap3 worktrees removed. The read-only after-status check raced its concurrent removal, so its apparent deletions are a cleanup artifact, not source edits. Before status was clean. Evidence remains under `/tmp/lead-31723-r1/capture-3/`.

AI-assisted; verified with the tests and tools listed above.

## Retained round-2 row evidence

| Row / viewport·theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C1 short ·390×844·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/792b123c3f4ad46f/C1short-before-390-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/258278ecc33be118/C1short-after-390-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7f37f20688c008c9/C1short-390-light-Diff0.png)<br>AE 3520 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ca9f279f9ba87aa6/C1short-390-light-DiffT.png)<br>AE 710 |
| C1 short ·390×844·dark | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8d8f4e5783f19cc1/C1short-before-390-dark.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/aaa2e844db31d666/C1short-after-390-dark.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ac06e1de1514a96/C1short-390-dark-Diff0.png)<br>AE 3523 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5650d13baf425af0/C1short-390-dark-DiffT.png)<br>AE 3477 |
| R08 ·1440×1000·light | — | ![Tab focus and idle tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0cc9f66fdb120c0f/R08-after-1440-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ab40c070f6c06ddd/R08.mp4) | — | — |
| R09 ·1440×1000·light | — | ![Live animated checking state](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3385270169591b42/R09-after-1440-light.png)<br>[Click to pending recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/260038d740e23593/R09-clean.mp4); [Reduced-motion tooltip recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9f83f3e0bb3d949b/R42-and-R36-reduce-clean.webm) | — | — |
| R11 ·390×844·light | — | ![Wrapped long-label failure tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2e0b061cbaefc419/R11-after-390-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7e59e0b035bc0b5b/R11.mp4) | — | — |
| R14 ·1440×1000·light | — | ![Selected source with blank reference and no check](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/66ee2a2b999c3931/R14-after-1440-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/008bd5016a362b46/R14.mp4) | — | — |
| R15 ·390×844·light | — | ![Rejected draft with no check](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ad80f76100b6cdd1/R15-after-390-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3e8f2408f4a09d9a/R15.mp4) | — | — |
| R22 ·1440×1000·light | — | Accepted app-limited attempt; diagnostic ![Disconnected editor, not a command failure result](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dab48a11bf1d9c89/R22-disconnected-after-1440-light.png)<br>[Diagnostic recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f625cc29ee726cf0/R22-disconnect.mp4) | — | — |
| R23 ·1440×1000·light | — | Round4 above supplies the labelled connected command-failure capture. | — | — |
| R26 dedicated Cursor key ·1440×1000·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8f6ca7aa5f4fb068/R26-before-1440-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9b6980b517f9f602/R26-after-1440-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00b4a6a51b6b4020/R26-1440-light-Diff0.png)<br>AE 670 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbe4c6cfe548dad1/R26-1440-light-DiffT.png)<br>AE 294 |
| R27 Server password ·390×844·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b844635cc7fb41fb/R27-before-390-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ebeb68a11a2be0a/R27-after-390-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/acc5ea2bb2fa5055/R27-390-light-Diff0.png)<br>AE 7037 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c5b3079a50072ee/R27-390-light-DiffT.png)<br>AE 1417 |
| R31 source-control token ·1440×1000·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bdce4ef18c737df4/R31-before-1440-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c4d9dfe9a75bb17/R31-after-1440-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/97f53eb665ea9dad/R31-1440-light-Diff0.png)<br>AE 694 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a93f2a74a9a07af2/R31-1440-light-DiffT.png)<br>AE 292 |
| R32 Add hub ·1440×1000·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4e80ba386b7d228b/R32-before-1440-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/431186ee6272dc63/R32-after-1440-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c8a6141cae837ce7/R32-1440-light-Diff0.png)<br>AE 305 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4725affa76e79f29/R32-1440-light-DiffT.png)<br>AE 229 |
| R33 EAS token ·1440×1000·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/50188d10ad97b77d/R33-before-1440-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/21a6f42f14d4bd1e/R33-after-1440-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cfa6eaac3e58bbc2/R33-1440-light-Diff0.png)<br>AE 668 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f91d3bb97f8a9bb4/R33-1440-light-DiffT.png)<br>AE 269 |
| R34 Simlock token ·1440×1000·light | ![Before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ada96c5bc7400505/R34-before-1440-light.png) | ![After](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/193d1fd536234a20/R34-after-1440-light.png) | ![Diff0](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dad89dcd3a57fce/R34-1440-light-Diff0.png)<br>AE 697 | ![DiffT](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0769d32700886c59/R34-1440-light-DiffT.png)<br>AE 278 |
| R35 ·multiple environments | — | Round4 above supplies both check-capable destinations and independent results. | — | — |
| R36 ·1440×1000·light·reduce | — | ![EAS save held, check disabled](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/36027d0d830eb065/R36reduce-after-1440-light-reduce.png)<br>[Normal-motion recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ffda230d04566ea/R36.mp4); [Reduced-motion recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9f83f3e0bb3d949b/R42-and-R36-reduce-clean.webm) | — | — |
| R37 ·1440×1000·light | — | ![Source-control save held, fieldset disabled](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62d26b98d5173d76/R37-after-1440-light.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b8dd099a8131ed81/R37.mp4) | — | — |
| R38 ·1440×1000·light | — | ![Read-only provider editor, check disabled](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b2a64676b42f4371/R38-after-1440-light.png) | — | — |
| R42 ·1440×1000·light·reduce | — | ![Reduced-motion pending tooltip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c6eae640f190527c/R42-after-1440-light-reduce.png) ![Reduced-motion completed failure](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1483045dffb8bbf2/R42complete-after-1440-light-reduce.png)<br>[Recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9f83f3e0bb3d949b/R42-and-R36-reduce-clean.webm) | — | — |

**State details and limits:** R08 uses click into the reference followed by a real Tab to the check; the screenshot shows its focus ring and idle tooltip. R09's live still shows the intended pending spinner, not an animation artifact to remove; its clean normal-motion video proves click→pending, while the reduced-motion recording additionally proves the readable checking tooltip. R11 wraps the entire long provider label within 390 px. R14's Server password has a selected source but no committed reference, so its op:// placeholder has no check; the rejected environment row below is context. R15 starts from a saved reference and rejects not-a-reference on blur. R26 is the dedicated Cursor API key field, with its own Clear. R27 shows Server password plus the context environment row. R31 is GitHub's credentials field, not a GitCafe/GitLab substitute. R32's stills show a committed reference in Add hub; its setup recording ends with the selected blank source, before the later committed-reference still. R33/R34 show the configured EAS/Simlock token editors. R36/R37 hold the actual outgoing settings-write frame with hold-save.js; the real parent stays saving and the check is disabled. The exact frame is forwarded on release; no component state or command response is fabricated. R38 is a genuine orchestration:read-only pairing: limited-permissions banner, inert/dim card and disabled checks. Round3 adds the genuine managed-policy row/reason shown above; that row has no editable input/check.

## What else changed

- The button takes horizontal space from the native reference input. The retained long 390 px C1 pairs are labelled **C1-long / R41 overflow** below: text already clips before, and more clips after. This retained pair is width-overflow proof. Round3 separately proves the 1024/1025-character validation boundary above. The new C1 short pairs use op://Dev/Key/x, which fits on both sides in light and dark.
- R26 adds a check beside the tighter dedicated input and leaves Clear in place; R27 changes both Server password and the context variable input. R31–R34 add the check at the token's right edge without shifting their surrounding panels or dialogs. Final Diff0 changed pixels stay within the affected input/check rectangles. A transient R26 scrollbar mismatch was retaken and is absent from the selected final pair.
- No unrelated text, theme, navigation, provider-status or timestamp differences appear in the final paired comparisons. This is a claim about these pairs, not the entire application. The after-only warning, placeholder, readonly and saving states are not before/after layout comparisons.

## Remaining limits

- **R22 accepted app-limited attempt:** the retained diagnostic shows genuine pre-click disconnect. At1.447567s the editor is replaced by “Reconnect fs-26 to change its settings”; no check can be clicked. It does not prove a command-failure tooltip or recovery. This is an accepted app-limited attempt, not a newly completed disconnect capture.
- R23 is verified with the explicitly labelled browser transport harness above. It does not claim a naturally occurring server failure. R35's round3 limitation is closed by two fresh capture-revision destinations in round4.
- Other unrequested original matrix variants, native mobile, Electron shell, live 1Password, dependent-provider recovery and stale replies remain outside this evidence. No server tests were run for this capture-only task.

## Recording chapters from encoded frames

All times below are ffprobe best_effort_timestamp_time in the uploaded final files, checked against ffmpeg-decoded frames. Visible-state chapters are not timestamps of invisible RPC dispatch or stub-gate release. For C2/C3 the corrected chapters replace the old UTC narration in the retained section below.

### R08

[R08.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ab40c070f6c06ddd/R08.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Idle committed reference |
| 2.453400s (frame 18) | Reference input focused |
| 3.932633s (frame 22) | Check has keyboard focus; hover tooltip shown |
| 4.399833s (frame 23) | Idle tooltip and focus ring visible |

### R09-clean

**R09 media timing, unmodified retained file:** container and video-stream duration **7.015644s** (7.016s rounded); final decoded presentation timestamp **10.084989s** (frame 16), final frame duration0.438478s, so the encoded presentation endpoint is10.523467s. Container metadata and decoded presentation timeline disagree. The final chapter uses the real encoded frame at10.084989s; ordinary playback seeking is not established. Visual pending proof also exists independently in the live PNG and reduced-motion WebM. [R09-timing.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d39ad7213cabccea/R09-timing.json)

[R09-clean.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/260038d740e23593/R09-clean.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Idle committed reference |
| 0.438478s (frame 2) | Click halo |
| 1.315433s (frame 4) | Pending spinner visible |
| 10.084989s (frame 16) | Still pending; held read not yet released |

### R11

[R11.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7e59e0b035bc0b5b/R11.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Narrow committed reference |
| 0.671533s (frame 12) | Warning visible |
| 1.976167s (frame 23) | Readable wrapped long-label failure tooltip |

### R14

[R14.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/008bd5016a362b46/R14.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Server password has no source selected |
| 3.428000s (frame 17) | Source menu visible |
| 15.366800s (frame 33) | Selected source; blank reference placeholder; no check |

### R15

[R15.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3e8f2408f4a09d9a/R15.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Committed reference failure tooltip |
| 0.337900s (frame 4) | Rejected draft error, check absent |
| 1.327933s (frame 5) | Settled rejected error wraps at 390 |

### R22-disconnect

[R22-disconnect.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f625cc29ee726cf0/R22-disconnect.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Idle editor before stopping server |
| 1.447567s (frame 3) | Reconnect placeholder replaces editor; check unavailable |

### R32

[R32.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c90b0efd684cf07b/R32.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Add hub dialog open |
| 2.198467s (frame 17) | Synthetic loopback URL entered |
| 5.976467s (frame 23) | Source menu open |
| 7.611367s (frame 39) | Source selected; reference still blank in this recording |

### R36

[R36.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ffda230d04566ea/R36.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | EAS edit token is enabled |
| 2.311300s (frame 18) | Save pending; token check disabled |
| 8.216400s (frame 20) | Save remains held |

### R37

[R37.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b8dd099a8131ed81/R37.mp4)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | GitHub token fieldset enabled |
| 2.086533s (frame 18) | Save pending; fieldset and check disabled |
| 5.267633s (frame 22) | Write remains held |

### R42-and-R36-reduce-clean

[R42-and-R36-reduce-clean.webm](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9f83f3e0bb3d949b/R42-and-R36-reduce-clean.webm)

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame1) | App loading: T3 logo |
| 0.040000s (frame2) | App loading: T3 logo |
| 0.080000s (frame3) | App loading: editor present; font/layout settling |
| 0.200000s (frame6) | Idle committed reference, reduced motion; final text layout visible |
| 0.320000s (frame9) | Pending loader visible |
| 2.000000s (frame51) | Pending loader and readable Checking the secret tooltip |
| 4.000000s (frame101) | Warning icon and readable failure tooltip |
| 8.000000s (frame201) | EAS editor open; account check pending |
| 9.000000s (frame226) | Save pending; token check disabled and saving footer visible |
| 11.000000s (frame276) | EAS editor closed; Devices settings visible |

## Reproduction and verification artifacts

[All scripts, including reused round1 drivers and stub op](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1b550a0394415cc2/scripts.zip) · [Round2 replay instructions](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/71b8d1011c7d9251/round2-replay.md) · [Encoded timelines and reviewed contact sheets](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5aef764fda8bd77f/recording-review.zip) · [encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ff853133cf0faed/encoded-chapters.json) · [original-dimensions.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ba45ce0666dfb04e/original-dimensions.json) · [asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/715db69a41adc66e/asset-manifest.json) · [diff-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f9f8366fb8990b40/diff-manifest.json) · [selected-captures.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e45ed07d7f53d7f5/selected-captures.json) · [animated-frame-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/36e6ada9357052fd/animated-frame-manifest.json) · [settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/87d18c431d7ee1d3/settled-frame-pairs.zip) · [cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f71cd376cf98d7a0/cleanup.json) · [friction.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ce8337eaf9e905b/friction.txt)

Both temporary checkouts were clean before removal. All captured server groups were stopped, four dev ports verified closed, three owned Preview tabs closed, and both temporary worktrees removed. No lead worktree, live database or PR body was changed. Evidence remains at /tmp/lead-31723-r1/capture-2/; round1 remains untouched at /tmp/lead-31723-r1/capture/.

## Retained round1 evidence, with corrected metadata

## Evidence

**Visible layout side effect:** the check button shortens the reference input. At 390 px this hides more trailing characters of the committed reference; the evidence retains that actual horizontal input overflow. No other visible difference was found outside the affected control rectangles at zero threshold.

Captured **6/6 named groups (C1–C6): 16 stills, 2 recordings, 10 diffs** for [#31723](https://git.cafe/pingdotgg/t3code/pull/31723) ([GitHub mirror](https://github.com/pingdotgg/t3code/pull/31723)). Before [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5); after [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89). Both exact checkouts were clean before removal. The concurrently edited lead checkout was not used for final evidence.

**Corrected rendering environment for the retained round-1 captures:** Preview Chrome 156 on Linux x86_64; CSS viewport1440×1000 or390×844, DPR 2, zoom 1, root16 px, fonts loaded, 100% font scale. Preview exported wide stills at1280×889 (not2880×2000); narrow stills780×1688; videos2880×2000. Every selected file was checked with identify; see the round-2 original-dimensions manifest. Themes and frozen page Date are unchanged. Chapters below now use encoded-frame PTS, not tool-observed UTC. Narrow C1 outer scroll850; wide outer scroll0; inner scroll0. Stub op CLI only.

**Fixture:** fresh per-checkout databases with T3CODE_DEV_SEED=0 and T3CODE_FEATURE_SECRETS=1; the same RPC seed driver configured a 1Password source labelled Dev vault and disabled Synthetic provider. Good reference is op://Dev/Good/credential; missing reference is op://Dev/Missing/credential. The final C1/C5 paired provider list contains Codex, Claude and Synthetic provider; C2–C4 also retain the disabled Replay (dev) default. paired-fixture.js replays the final paired map normalization after the base seed. The stub emits a synthetic value only for Good; no live account is contacted or value exposed in the UI. No provider agent was started. C5 additionally commits op://Dev/Good/key into Server password through the same RPC on both sides.

**Settled-frame and diff check:** waited for resource-network quiet ≥1 second (persistent WebSocket excluded) and document.fonts.ready; two full screenshots 500 ms apart were pixel-identical (AE=0) for all 16 selected stills. Every selected capture, every diff, and recording key frames/contact sheets were opened and inspected before upload. Diff0 uses ImageMagick compare -fuzz 0%; DiffT uses -fuzz 2%. Both amplify differing pixels to full red on white, exposing even one-level changes at zero fuzz. File SHA-256 values and metrics are in the asset/diff manifests.

### C1 — idle environment-variable row

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C1 · 1440×1000 · light | ![C1-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fabdfad044828a62/C1-before-1440-light.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5)<br>stub op CLI (no live 1Password) | ![C1-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8d74117ddd9c329a/C1-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | ![C1-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/50fc256bbc1f80e8/C1-1440-light-Diff0.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 670; fuzz 0% | ![C1-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a22cf852e4b9f811/C1-1440-light-DiffT.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 290; fuzz 2% |
| C1 · 1440×1000 · dark | ![C1-before-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/66eb5c8b39b363c2/C1-before-1440-dark.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5)<br>stub op CLI (no live 1Password) | ![C1-after-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ff16c9a597813fdc/C1-after-1440-dark.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | ![C1-1440-dark-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6c3c46a8c6b6116a/C1-1440-dark-Diff0.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 671; fuzz 0% | ![C1-1440-dark-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/448cea6aa43cd823/C1-1440-dark-DiffT.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 619; fuzz 2% |
| C1-long / R41 overflow · 390×844 · light | ![C1-before-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c99547a1351539d3/C1-before-390-light.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5)<br>stub op CLI (no live 1Password) | ![C1-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/557f9e3d8344079e/C1-after-390-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | ![C1-390-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5e9faed83f303095/C1-390-light-Diff0.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 3676; fuzz 0% | ![C1-390-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bfd8179311484f90/C1-390-light-DiffT.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 1026; fuzz 2% |
| C1-long / R41 overflow · 390×844 · dark | ![C1-before-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3291869767073a79/C1-before-390-dark.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5)<br>stub op CLI (no live 1Password) | ![C1-after-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/19499bf6dc81baf2/C1-after-390-dark.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | ![C1-390-dark-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0b89444e854f7a96/C1-390-dark-Diff0.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 3678; fuzz 0% | ![C1-390-dark-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/06c1d06368b737b7/C1-390-dark-DiffT.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 3629; fuzz 2% |

At 390 px the native single-line input clips the end of the long committed reference on both sides, more after the new button. The full committed value was verified through the real settings RPC; full on-screen readability of that value at this width remains unverified. This is a reproducible layout limitation, so no clean-unclipped narrow-frame claim is made.

### C2 — check resolves

After only, 1440×1000 light, SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89); stub op CLI (no live 1Password). Chapters below were re-derived from every encoded frame using ffprobe and ffmpeg. The first resolved icon is 4.622200s. The driver release has no visible marker, so it is not assigned a chapter time.

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Idle good reference |
| 0.916600s (frame 2) | Pointer over idle check |
| 1.076167s (frame 4) | Click halo visible |
| 1.815233s (frame 18) | Pending loader visible |
| 4.163500s (frame 24) | Last pending encoded frame |
| 4.622200s (frame 25) | First resolved check icon |
| 5.566067s (frame 27) | Hover background visible |
| 8.260433s (frame 30) | Readable Secret resolved tooltip |

[C2-after-1440-light.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/38d19ca0f3de50a4/C2-after-1440-light.mp4)

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C2 · 1440×1000 · light | Not requested | ![C2-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d1beedcf67d1faa4/C2-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |
| C2 · 1440×1000 · dark | Not requested | ![C2-after-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/89f644402a819d7c/C2-after-1440-dark.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |

The provider remained deliberately Disabled; it had not been unavailable or signed out because of this secret. Conditional provider-status recovery/rebuild is not demonstrated by this fixture.

### C3 — check fails

After only, 1440×1000 light, SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89); stub op CLI (no live 1Password).

| Encoded time | Visible state |
| --- | --- |
| 0.000000s (frame 1) | Good reference resolved |
| 1.582967s (frame 18) | Missing text visible in focused input |
| 2.100167s (frame 21) | Click halo while focused |
| 2.572233s (frame 33) | Missing committed, blurred, idle icon reset |
| 3.937000s (frame 36) | Pending loader visible |
| 5.343100s (frame 41) | Last pending encoded frame |
| 5.815633s (frame 42) | First warning icon |
| 9.788267s (frame 47) | Readable failure tooltip naming Dev vault |

The first warning is 5.815633s. Driver release is not directly visible and has no assigned chapter time. The click halo, focused edit, and committed reset are described in their encoded visual order; their PTS do not establish event-dispatch ordering.

[C3-after-1440-light.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d5c63482af38a549/C3-after-1440-light.mp4)

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C3 · 1440×1000 · light | Not requested | ![C3-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/88d01dcd070901a1/C3-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |
| C3 · 1440×1000 · dark | Not requested | ![C3-after-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b4f187297a23fefb/C3-after-1440-dark.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |

Failure tooltip: `Could not read this secret from "Dev vault". Check the provider's settings and that its store is unlocked.`

### C4 — rejected visible draft

Typed not-a-reference and blurred the committed-reference input. Validation error is visible and the check button is absent.

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C4 · 1440×1000 · light | Not requested | ![C4-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/02492714e450f587/C4-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |

### C5 — another caller with its own layout

ProviderSettingsForm Server password, committed op://Dev/Good/key. Before has no check button; after has one. The environment row is also visible and gains its own check button.

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C5 · 1440×1000 · light | ![C5-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fb084a9f4a1e4fa5/C5-before-1440-light.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5)<br>stub op CLI (no live 1Password) | ![C5-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a16bfc40bb2ab5bf/C5-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | ![C5-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c8d843e1ef9ba3c7/C5-1440-light-Diff0.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 1312; fuzz 0% | ![C5-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ede1f687a708026c/C5-1440-light-DiffT.png)<br>SHA [c52df24d28](https://git.cafe/pingdotgg/t3code/commit/c52df24d285a072ad9c3f7ab5b3656c0be1cb0f5) → [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>AE 533; fuzz 2% |

### C6 — session without settings write

Standard CLI pairing scopes include settings:write. An explicit narrower pair was minted with `node apps/server/src/bin.ts pair --scope orchestration:read --scope providers:manage`; the incognito session had exactly those two permissions. The check button is disabled; hovering its wrapper shows `You cannot check secrets on this environment`.

| Row / viewport / theme | Before | After | Diff0 | DiffT |
| --- | --- | --- | --- | --- |
| C6 · 1440×1000 · light | Not requested | ![C6-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cabf5a845c36d44f/C6-after-1440-light.png)<br>SHA [cf10da0e4a](https://git.cafe/pingdotgg/t3code/commit/cf10da0e4acbc903b779f064791e16906203bf89)<br>stub op CLI (no live 1Password) | N/A: after only | N/A: after only |

### Retained round-1 differences

- C1: check icon appears at the right of the env reference; the input right edge and rounded border move left to make room. At 390 px additional trailing reference characters are hidden by the native input overflow. No surrounding layout shift appears.
- C5: the same changes occur in both Server password and the context environment row. The Server password clear icon stays in place.
- The zero-threshold comparisons isolate all changed pixels to those affected control rectangles. They show no additional differences in text, theme, provider status, timestamps, navigation, or the surrounding surface. No broader application-wide claim is made.

### Retained round-1 scope limits

- Older-server omission in round1: round3 now shows the before server paired into the after client, with no check on its Simlock row. No broader mixed-version interactions are claimed.
- Stale async reply: not captured, as explicitly omitted. No test or description is offered as a capture substitute.
- Native mobile: not captured; this change has no secret-reference fields there. Responsive web evidence is not native-mobile proof. Desktop wraps the same web code; its shell was not separately exercised.
- Conditional dependent-provider recovery and cache-preservation behavior: unverified by these captures; the fixture provider is disabled.
- Live 1Password integration: unverified; every capture depends on the disclosed synthetic op CLI.
- Full long-reference legibility at 390 px remains limited by the actual native input overflow shown in C1-long/R41. Round2 separately shows the short reference fully legible in both narrow themes.
- Remaining original matrix variants are not certified. The linked round1 disposition artifact is historical; the current status table at the top supersedes it for rows covered in later rounds. No server tests were run by this evidence-capture task.

[matrix-dispositions.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bebdb770232c4cef/matrix-dispositions.md)

### Fixture, driver, and verification artifacts

[op](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f08d95b702d4c640/op)

[seed-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c94a47932cfa976f/seed-driver.js)

[c5-seed.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f9d80ff49ae88503/c5-seed.js)

[paired-fixture.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/33cc304f39fbee4a/paired-fixture.js)

[screen-setup.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d583643d72d51610/screen-setup.js)

[capture-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72269333b2e72efd/capture-driver.js)

[start-servers.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9eaf73a2167381b0/start-servers.py)

[start-isolated-after.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/70b91f3ce0618e24/start-isolated-after.py)

[replay-instructions.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbed22efd8c2e523/replay-instructions.md)

[make-diffs.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e5f6ebef69e1bb98/make-diffs.py)

[review-recordings.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f7c758af7d0f1756/review-recordings.py)

[Original C2 UTC action log (not encoded chapters)](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/826294c3d42d19eb/C2-timeline.json)

[Original C3 UTC action log (not encoded chapters)](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c7757a7368d312f3/C3-timeline.json)

[permission-proof.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c804b565fc6792cd/permission-proof.json)

[asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3cbe9aa9b60eef6b/asset-manifest.json)

[diff-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e0b7eacad048ea5d/diff-manifest.json)

[settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/eb46239eacf9a0b0/settled-frame-pairs.zip)

![C2-contact-sheet.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3335d97dfceb6698/C2-contact-sheet.png)

![C3-contact-sheet.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b9da511880436d1c/C3-contact-sheet.png)

[cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8fe87de3803f2538/cleanup.json)

[friction.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c890e140814f7640/friction.txt)

[upload-assets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/50c284a0ca0b39bb/upload-assets.py)

[make-evidence.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b0353d0cea1f4daf/make-evidence.py)

Both temporary worktrees were removed, all three owned preview tabs closed, and all captured server process groups stopped. The original after server was stopped when concurrent edits were reported; the lead worktree and its edits were left untouched. No PR body was edited.

AI-assisted; verified with the tests and tools listed above.


## Verbatim round2 ghdrop output

![C1short-before-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/792b123c3f4ad46f/C1short-before-390-light.png)
![C1short-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/258278ecc33be118/C1short-after-390-light.png)
![C1short-before-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8d8f4e5783f19cc1/C1short-before-390-dark.png)
![C1short-after-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/aaa2e844db31d666/C1short-after-390-dark.png)
![R08-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0cc9f66fdb120c0f/R08-after-1440-light.png)
![R11-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2e0b061cbaefc419/R11-after-390-light.png)
![R15-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ad80f76100b6cdd1/R15-after-390-light.png)
![R14-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/66ee2a2b999c3931/R14-after-1440-light.png)
![R26-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8f6ca7aa5f4fb068/R26-before-1440-light.png)
![R26-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9b6980b517f9f602/R26-after-1440-light.png)
![R27-before-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b844635cc7fb41fb/R27-before-390-light.png)
![R27-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ebeb68a11a2be0a/R27-after-390-light.png)
![R31-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bdce4ef18c737df4/R31-before-1440-light.png)
![R31-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c4d9dfe9a75bb17/R31-after-1440-light.png)
![R37-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/62d26b98d5173d76/R37-after-1440-light.png)
![R32-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4e80ba386b7d228b/R32-before-1440-light.png)
![R32-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/431186ee6272dc63/R32-after-1440-light.png)
![R33-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/50188d10ad97b77d/R33-before-1440-light.png)
![R33-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/21a6f42f14d4bd1e/R33-after-1440-light.png)
![R34-before-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ada96c5bc7400505/R34-before-1440-light.png)
![R34-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/193d1fd536234a20/R34-after-1440-light.png)
![R38-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b2a64676b42f4371/R38-after-1440-light.png)
![R22-disconnected-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dab48a11bf1d9c89/R22-disconnected-after-1440-light.png)
![R42-after-1440-light-reduce.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c6eae640f190527c/R42-after-1440-light-reduce.png)
![R42complete-after-1440-light-reduce.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1483045dffb8bbf2/R42complete-after-1440-light-reduce.png)
![R36reduce-after-1440-light-reduce.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/36027d0d830eb065/R36reduce-after-1440-light-reduce.png)
![R09-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3385270169591b42/R09-after-1440-light.png)
![R36-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e6cd8705369a410b/R36-after-1440-light.png)
![C1short-390-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7f37f20688c008c9/C1short-390-light-Diff0.png)
![C1short-390-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ca9f279f9ba87aa6/C1short-390-light-DiffT.png)
![C1short-390-dark-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ac06e1de1514a96/C1short-390-dark-Diff0.png)
![C1short-390-dark-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5650d13baf425af0/C1short-390-dark-DiffT.png)
![R26-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/00b4a6a51b6b4020/R26-1440-light-Diff0.png)
![R26-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbe4c6cfe548dad1/R26-1440-light-DiffT.png)
![R27-390-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/acc5ea2bb2fa5055/R27-390-light-Diff0.png)
![R27-390-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7c5b3079a50072ee/R27-390-light-DiffT.png)
![R31-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/97f53eb665ea9dad/R31-1440-light-Diff0.png)
![R31-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a93f2a74a9a07af2/R31-1440-light-DiffT.png)
![R32-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c8a6141cae837ce7/R32-1440-light-Diff0.png)
![R32-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4725affa76e79f29/R32-1440-light-DiffT.png)
![R33-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/cfa6eaac3e58bbc2/R33-1440-light-Diff0.png)
![R33-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f91d3bb97f8a9bb4/R33-1440-light-DiffT.png)
![R34-1440-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0dad89dcd3a57fce/R34-1440-light-Diff0.png)
![R34-1440-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0769d32700886c59/R34-1440-light-DiffT.png)
[R08.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ab40c070f6c06ddd/R08.mp4)
[R09-clean.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/260038d740e23593/R09-clean.mp4)
[R11.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7e59e0b035bc0b5b/R11.mp4)
[R14.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/008bd5016a362b46/R14.mp4)
[R15.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3e8f2408f4a09d9a/R15.mp4)
[R22-disconnect.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f625cc29ee726cf0/R22-disconnect.mp4)
[R32.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c90b0efd684cf07b/R32.mp4)
[R36.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ffda230d04566ea/R36.mp4)
[R37.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b8dd099a8131ed81/R37.mp4)
[R42-and-R36-reduce-clean.webm](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9f83f3e0bb3d949b/R42-and-R36-reduce-clean.webm)
[c5-seed.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ac6b3badd4a5a9e2/c5-seed.js)
[capture-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c969989ae337561e/capture-driver.js)
[capture-round2.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bfc12bbc7c36e509/capture-round2.js)
[extend-fixture.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9948e1f15fba89ea/extend-fixture.js)
[finalize-assets.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bd8fc1598665e6d7/finalize-assets.py)
[hold-save.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/26c39b474bf0daab/hold-save.js)
[make-diffs.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ef309cfdc33581ff/make-diffs.py)
[op](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/64aef76e6feb2d69/op)
[package-public.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b0a92160c40a3ff2/package-public.py)
[paired-fixture.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6eeaa7d30b5f9d7f/paired-fixture.js)
[prepare-round2.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/10162603924cf517/prepare-round2.py)
[reduced-motion-recording.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/abed872d4ca9efff/reduced-motion-recording.mjs)
[reduced-motion.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d7ecb0ca62b189a8/reduced-motion.mjs)
[replay-instructions.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e94d39a06cf843a5/replay-instructions.md)
[review-new-recordings.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5a2c26768f3fbfa1/review-new-recordings.py)
[review-recordings.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a0e504b0d98ea8ad/review-recordings.py)
[round2-replay.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/71b8d1011c7d9251/round2-replay.md)
[screen-setup.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ec720e2b0ea1e93/screen-setup.js)
[seed-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ce656346cec4b13/seed-driver.js)
[start-isolated-after.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/53fb2b34bcebd324/start-isolated-after.py)
[start-round2.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/95ee3ed5a4754d43/start-round2.py)
[scripts.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1b550a0394415cc2/scripts.zip)
[recording-review.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5aef764fda8bd77f/recording-review.zip)
[settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/87d18c431d7ee1d3/settled-frame-pairs.zip)
[selected-captures.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e45ed07d7f53d7f5/selected-captures.json)
[animated-frame-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/36e6ada9357052fd/animated-frame-manifest.json)
[original-dimensions.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ba45ce0666dfb04e/original-dimensions.json)
[asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/715db69a41adc66e/asset-manifest.json)
[diff-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f9f8366fb8990b40/diff-manifest.json)
[encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ff853133cf0faed/encoded-chapters.json)
[cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f71cd376cf98d7a0/cleanup.json)
[friction.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ce8337eaf9e905b/friction.txt)
[C2-frames.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/01c889c97c4032b2/C2-frames.json)
[C3-frames.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8b08be8c9496cbe4/C3-frames.json)
![C2-encoded-controls.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f63705789104710d/C2-encoded-controls.png)
![C3-encoded-controls.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9986af602bc0bb5e/C3-encoded-controls.png)

AI-assisted; verified with the tests and tools listed above.

## Verbatim round3 ghdrop output

![R31-before-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1e1e64bcc18257fc/R31-before-390-light.png)
![R31-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d409f9ff9363103b/R31-after-390-light.png)
![R11-max64-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/db9f34ed31380f07/R11-max64-after-390-light.png)
![R11-max64-after-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ea029ee03d51da80/R11-max64-after-390-dark.png)
![R41-max1024-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/98d1a37191117289/R41-max1024-after-390-light.png)
![R41-max1024-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/428dbddd0d5ee3d7/R41-max1024-after-1440-light.png)
![R41-over1025-after-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/56f904b64178d798/R41-over1025-after-390-light.png)
![R35-two-environments-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbcdbeb022bd2786/R35-two-environments-after-1440-light.png)
![R38-managed-policy-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/946e3b6e53fa5ce9/R38-managed-policy-after-1440-light.png)
![R31-390-light-Diff0.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/99ff34eb3f044b5b/R31-390-light-Diff0.png)
![R31-390-light-DiffT.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/33369511ba17ab7c/R31-390-light-DiffT.png)
[scripts.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/90d7485608ad08c6/scripts.zip)
[settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc40ee9bc77c92d7/settled-frame-pairs.zip)
[recording-frame-review.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1b96d84eaf6eeccb/recording-frame-review.zip)
[encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6391955b7fcabbce/encoded-chapters.json)
[R09-timing.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d39ad7213cabccea/R09-timing.json)
[selected-captures.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fde39e2039b9574a/selected-captures.json)
[diff-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5b880040cb9c439e/diff-manifest.json)
[cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/213e149eda871d30/cleanup.json)
[friction.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5cfd319dc51e1d0/friction.txt)
[boundary-and-policy-proof.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/236dd3034ab0fa59/boundary-and-policy-proof.json)
[asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c5c2470ec03786bf/asset-manifest.json)

## Verbatim round4 asset ghdrop output

![R23-transport-failure-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/72334a75c44a6eab/R23-transport-failure-after-1440-light.png)
![R35-alpha-failed-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/be53d8643f1083fd/R35-alpha-failed-after-1440-light.png)
![R35-alpha-resolved-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7cf92aa2485849ec/R35-alpha-resolved-after-1440-light.png)
![R35-beta-failed-after-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c42ddc397e81ff31/R35-beta-failed-after-1440-light.png)
[R35-independent-environments-delivered.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2d69bf29dc77dc86/R35-independent-environments-delivered.mp4)
[R23-transport-fault-delivered.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d08e963f45b50e9c/R23-transport-fault-delivered.mp4)
[transport-fault.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a08f8be1b06c1c9f/transport-fault.js)
[encoded-chapters.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/37584f7b47b4426b/encoded-chapters.json)
[scripts.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d5710e2c75c47e08/scripts.zip)
[settled-frame-pairs.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14460e884f00fc41/settled-frame-pairs.zip)
[recording-frame-review.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c6f44e7258bec54a/recording-frame-review.zip)
[verification.zip](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/06c356eb836cd6bb/verification.zip)
[asset-manifest.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f5fae5409c021e7a/asset-manifest.json)
