# Issue 17643 — evidence index

Disposition: **cannot-verify ios-swift**. Evidence capture is incomplete; no native pass is claimed.

## Revision and environment

- Before/base/merge-base: `4619c0bca6a385e53f3479e4e52a9cdf2d12ff62` (origin/t3code/rebuild-mobile-app-swift).
- Head: `f8dadbc5f683cfad29828db7f9ab651b1228ceb6`.
- Both SHAs were resolved read-only in `/home/ubuntu/wt/issue-17643`; HEAD matches the requested head and `git status --short` was empty.
- Rendering environment unavailable: Linux, with no Swift/Xcode/iOS native runtime (known constraint). No provisioning, servers, browsers, emulators, Swift tests, or native execution were performed in this evidence step. No git edits or public comments/PRs were made.
- Native captures: **0**. Before screenshots/recordings: **0**. After screenshots/recordings: **0**. No description or request transcript is counted as a native capture.
- No UI changes are reported by the supplied matrix. “What else changed” in native rendering/behavior: **UNVERIFIED**, because neither revision was rendered.

## Actual supplied host evidence and its limit

[Runtime transcript](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a658716b267924bc/runtime.txt) was read locally in full. It records a prior real Linux HTTP server reproduction on server revision `8d3b061121`, not either Swift before/head revision. This step inspected the artifact; it did not rerun or independently observe that server.

- E+: transcript records GET `/api/orchestration/threads/thread:delegated-task:command%253Amcp%253Aissue-17643/bounded`, HTTP 200, and matching projection ID `thread:delegated-task:command%3Amcp%3Aissue-17643`.
- E−: transcript records GET `/api/orchestration/threads/thread:delegated-task:command%25253Amcp%25253Aissue-17643/bounded`, HTTP 404 with `thread_not_found`.
- This is host request/result text evidence for the server's distinction between paths. It is not a Swift builder capture, Swift test result, native screenshot, native recording, or before/after proof. B-P remains unverified end to end.
- The transcript reports isolated state, excluded credentials, no provider execution, and server shutdown. Those operational statements are supplied provenance, not independently re-executed checks here.

## Every unverified request/control row

Source: [proof matrix](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4f32ed715e2746b2/matrix.md), read locally in full. U = ordinary UUID; P = literal-percent delegated ID; R = reserved separators/raw percent ID.

- B-U, B-P, B-R: **UNVERIFIED** — Swift bounded GET, matching recent content and usable pagination cursor.
- F-U, F-P, F-R: **UNVERIFIED** — Swift full GET (no `/full` suffix), old checkpoint/full content, displayed pagination retained.
- H-U, H-P, H-R: **UNVERIFIED** — history after successful bounded read, cursor round trip, older items appended with current projection/sequence retained; R query/fragment isolation.
- CB-U, CB-P, CB-R: **UNVERIFIED** — bounded prefetch before existing-thread turn-start RPC, original ID and correct run/session, acknowledged completion.
- CF-U, CF-P, CF-R: **UNVERIFIED** — full prefetch before rollback with unresolved context, old checkpoint resolved and correct ID/checkpoint acknowledged.
- C0: **UNVERIFIED** — server-resolved rollback or bootstrap bypasses projection GET and preserves original JSON ID.
- A1: **UNVERIFIED** — managed DPoP success and signing of exact final URL.
- A2: **UNVERIFIED** — managed authorization rejection, credential refresh/reload, retry with identical percentEncodedPath.
- S: **UNVERIFIED** for every listed authenticated static-path smoke request: shell; websocket-ticket; auth/session; auth/clients; auth/clients/revoke; auth/clients/revoke-others; pull-requests/diff. Paths, methods, bodies and query behavior have no execution evidence here.

The added bounded-path assertion is unexecuted. The matrix notes its `try?` and unsupported synthetic response route; a recorded URL assertion alone would not prove successful decoding, matching content, pagination, command completion or rendering. No Swift row is promoted to verified by source inspection.

## Every unverified native row

- N1: **UNVERIFIED / cannot-verify ios-swift** — cold open U and P from thread list. Required interaction recording absent for before and head; correct transcript, ended loading, no not-found and cache/stream exclusion unobserved.
- N2: **UNVERIFIED / cannot-verify ios-swift** — P open then earlier history. Required interaction recording absent for before and head; older content, retained current transcript and ended loading unobserved.
- N3: **UNVERIFIED / cannot-verify ios-swift** — P action requiring bounded prefetch. Required interaction recording and correlated prefetch trace absent; intended-thread action completion unobserved.
- N4: **UNVERIFIED / cannot-verify ios-swift** — P rewind/revert to old checkpoint requiring full read. Required interaction recording absent for before and head; target availability and completed action in disposable workspace unobserved.
- N5: **UNVERIFIED / cannot-verify ios-swift** — settled P detail. Required still or labeled N1 frame absent for before and head; correct visible title/messages and absence of stale loading/failure unobserved.

Additional limits: native multi-environment routing and relay/tunnel connectivity remain unverified. Full-read consumers, subagent stopping and other thread workflows were not exercised; command aliases and providers were not individually executed. No claim of broader behavior coverage follows from shared request shapes. Exact raw paths, methods, decoded IDs, successful content identities, cursors and command acknowledgements for the Swift matrix remain missing.

## FRICTION — category | happened | avoidance

- Native runtime | Linux has no Swift/Xcode/iOS rendering environment; zero native captures and no Swift execution | Retain cannot-verify ios-swift; execute focused request proof and N1–N5 on an available Apple runtime without provisioning this host.
- Evidence scope | Existing host transcript proves only server response distinction on a separate revision | Preserve its server revision and provenance; do not mark B-P or native rows verified from it.
- Success oracle | Added assertion is unexecuted and the matrix reports suppressed transport failure | On a Swift-capable host return valid ID-matching fixtures and assert decoded content/success separately from URL construction.
- Before/after gap | Neither before nor head was rendered | Capture real labeled before/head recordings N1–N4 and still N5 when a native runtime is available; descriptions are not captures.

Prepared using the [ghdrop skill](/home/ubuntu/.codex/skills/ghdrop/SKILL.md); upload is an evidence artifact only, not a forge comment or PR.